jeans/core
jeans/core
1
0
Fork 0
mirror of https://github.com/home-assistant/core.git synced 2025-07-26 22:57:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update nginx docs (#4603)

Browse Source
This commit is contained in:
Lewis Juggins 2016-11-27 21:49:21 +00:00 committed by Paulus Schoutsen
parent e94b4ec006
commit ff4cb23f2a
1 changed files with 45 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
script/nginx-hass
View File

@ -66,48 +66,55 @@
# port 8123. # port 8123.
# #
## ##
http {
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server { server {
# Update this line to be your domain # Update this line to be your domain
server_name example.com; server_name example.com;
# These shouldn't need to be changed
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
return 301 https://$host$request_uri;
}
server {
# Update this line to be your domain
server_name example.com;
# Ensure these lines point to your SSL certificate and key
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
# Use these lines instead if you created a self-signed certificate
# ssl_certificate /etc/nginx/ssl/cert.pem;
# ssl_certificate_key /etc/nginx/ssl/key.pem;
# Ensure this line points to your dhparams file
ssl_dhparam /etc/nginx/ssl/dhparams.pem;
# These shouldn't need to be changed # These shouldn't need to be changed
listen 80 default_server; listen 443 default_server;
listen [::]:80 default_server ipv6only=on; add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
return 301 https://$host$request_uri; ssl on;
} ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
proxy_buffering off;
server { location / {
# Update this line to be your domain proxy_pass http://localhost:8123;
server_name example.com; proxy_set_header Host $host;
proxy_redirect http:// https://;
# Ensure these lines point to your SSL certificate and key proxy_http_version 1.1;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; proxy_set_header Upgrade $http_upgrade;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; proxy_set_header Connection $connection_upgrade;
# Use these lines instead if you created a self-signed certificate }
# ssl_certificate /etc/nginx/ssl/cert.pem;
# ssl_certificate_key /etc/nginx/ssl/key.pem;
# Ensure this line points to your dhparams file
ssl_dhparam /etc/nginx/ssl/dhparams.pem;
# These shouldn't need to be changed
listen 443 default_server;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
ssl on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
proxy_buffering off;
location / {
proxy_pass http://localhost:8123;
proxy_set_header Host $host;
proxy_redirect http:// https://;
} }
} }