diff --git a/files/reverse-proxy-ssl.conf b/files/reverse-proxy-ssl.conf new file mode 100644 index 0000000..efe462d --- /dev/null +++ b/files/reverse-proxy-ssl.conf @@ -0,0 +1,42 @@ + +server { + listen 443 ssl; + server_name web.au-team.irpo; + + ssl_certificate /etc/nginx/ssl/web.au-team.irpo.crt; + ssl_certificate_key /etc/nginx/ssl/web.au-team.irpo.key; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE+AESGCM:DHE+AESGCM; + ssl_prefer_server_ciphers off; + + location / { + proxy_pass http://172.16.1.2:8080; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + auth_basic "Restricted area"; + auth_basic_user_file /etc/nginx/.htpasswd; + } + } + +server { + listen 443 ssl; + server_name docker.au-team.irpo; + + ssl_certificate /etc/nginx/ssl/web.au-team.irpo.crt; + ssl_certificate_key /etc/nginx/ssl/web.au-team.irpo.key; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE+AESGCM:DHE+AESGCM; + ssl_prefer_server_ciphers off; + + location / { + proxy_pass http://172.16.2.2:8080; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} \ No newline at end of file diff --git a/files/ssl .docx b/files/ssl .docx new file mode 100644 index 0000000..ca2a871 Binary files /dev/null and b/files/ssl .docx differ