config, deploy: shione: nginx: enable https support

This commit is contained in:
Renken 2023-12-24 23:44:41 +01:00
parent 5c25b1d0e7
commit 81b8b02ac9
Signed by: renken
GPG key ID: 1F2BB159B645E575
5 changed files with 13 additions and 4 deletions

View file

@ -9,7 +9,7 @@ Standards-Version: 4.1.0
Package: nginx-config Package: nginx-config
Architecture: all Architecture: all
Multi-Arch: foreign Multi-Arch: foreign
Depends: ${misc:Depends}, nginx Depends: ${misc:Depends}, nginx, certbot, python3-certbot-nginx
Provides: ${diverted-files} Provides: ${diverted-files}
Conflicts: ${diverted-files} Conflicts: ${diverted-files}
Description: Shione nginx configuration. Description: Shione nginx configuration.

View file

@ -24,8 +24,8 @@ server {
# SSL configuration # SSL configuration
# #
# listen 443 ssl default_server; listen 443 ssl default_server;
# listen [::]:443 ssl default_server; listen [::]:443 ssl default_server;
# #
# Note: You should disable gzip for SSL traffic. # Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332 # See: https://bugs.debian.org/773332
@ -37,6 +37,11 @@ server {
# Don't use them in a production server! # Don't use them in a production server!
# #
# include snippets/snakeoil.conf; # include snippets/snakeoil.conf;
# managed by Certbot.
ssl_certificate /etc/letsencrypt/live/shione.net/fullchain.pem;
# managed by Certbot.
ssl_certificate_key /etc/letsencrypt/live/shione.net/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
root /var/www/html/www.shione.net; root /var/www/html/www.shione.net;

View file

@ -1 +0,0 @@
../sites-available/homepage.conf

View file

@ -0,0 +1 @@
../sites-available/shione.net

View file

@ -3,3 +3,7 @@
set -eu set -eu
adduser --system --no-create-home --verbose --debug nginx adduser --system --no-create-home --verbose --debug nginx
apt install nginx certbot python3-certbot-nginx
certbot --nginx -d shione.net -d www.shione.net