From: nutra-bot <nutradigest@gmail.com>
Date: Wed, 29 Jun 2022 19:00:57 +0000 (+0000)
Subject: update with certbot
X-Git-Url: https://git.nutra.tk/v1?a=commitdiff_plain;h=9e6f276a371b4e0b8993384feb587852ae9744ae;p=nutratech%2Fvps-root.git

update with certbot
---

diff --git a/etc/nginx/sites-available/default b/etc/nginx/sites-available/default
index d3c8afa..af5e21d 100644
--- a/etc/nginx/sites-available/default
+++ b/etc/nginx/sites-available/default
@@ -58,10 +58,11 @@ server {
 
 
   listen 443 ssl; # managed by Certbot
-  ssl_certificate /etc/letsencrypt/live/deveast.linode.poczatek.dev/fullchain.pem; # managed by Certbot
-  ssl_certificate_key /etc/letsencrypt/live/deveast.linode.poczatek.dev/privkey.pem; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/deveast.linode.poczatek.dev/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/deveast.linode.poczatek.dev/privkey.pem; # managed by Certbot
   include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
   ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 
@@ -84,10 +85,16 @@ server {
 
 # Redirect all HTTP to HTTPS with no-WWW
 server {
-  listen 80 default_server;
-  listen [::]:80 default_server;
   server_name ~^(?:www\.)?(.*)$;
   return 301 https://$1$request_uri;
+
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/deveast.linode.poczatek.dev/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/deveast.linode.poczatek.dev/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 
@@ -98,3 +105,17 @@ server {
   server_name ~^www\.(.*)$;
   return 301 $scheme://$1$request_uri;
 }
+
+server {
+    if ($host = dev.nutra.tk) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+  listen 80 default_server;
+  listen [::]:80 default_server;
+  server_name ~^(?:www\.)?(.*)$;
+    return 404; # managed by Certbot
+
+
+}
\ No newline at end of file