iac
/
nginx-certbox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

init

This commit is contained in:
Kameron Kenny - pi501 2024-05-15 23:58:20 -04:00
parent 5e13a02ebd
commit dd6eec7dbe
3 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
data/nginx/app.conf
View File

@ -17,13 +17,13 @@ server {
server_name thelinuxpro.net; server_name thelinuxpro.net;
server_tokens off; server_tokens off;
ssl_certificate /etc/letsencrypt/live/example.org/fullchain.pem; ssl_certificate /etc/letsencrypt/live/thelinuxpro.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.org/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/thelinuxpro.net/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
location / { location / {
proxy_pass http://example.org; proxy_pass http://127.0.0.1:8008;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

9
docker-compose.yml
View File

@ -1,4 +1,11 @@
version: '3' ---
volumes:
nginx_conf:
driver: local
certbot_conf:
driver: local
certbot_www:
driver: local
services: services:
nginx: nginx:

4
init-letsencrypt.sh
View File

@ -5,11 +5,11 @@ if ! [ -x "$(command -v docker compose)" ]; then
exit 1 exit 1
fi fi
domains=(thelinuxpro.net thelinux.pro git.thelinuxpro.net kameronkenny.com www.kameronkenny.com blog.kameronkenny.com) domains=(thelinuxpro.net)
rsa_key_size=4096 rsa_key_size=4096
data_path="./data/certbot" data_path="./data/certbot"
email="kkenny379@gmail.com" # Adding a valid address is strongly recommended email="kkenny379@gmail.com" # Adding a valid address is strongly recommended
staging=1 # Set to 1 if you're testing your setup to avoid hitting request limits staging=0 # Set to 1 if you're testing your setup to avoid hitting request limits
if [ -d "$data_path" ]; then if [ -d "$data_path" ]; then
read -p "Existing data found for $domains. Continue and replace existing certificate? (y/N) " decision read -p "Existing data found for $domains. Continue and replace existing certificate? (y/N) " decision