Nginx - Revision history

Kenneth: /* Let's Encrypt */

2024-01-20T03:51:22Z

Let's Encrypt

← Older revision		Revision as of 03:51, 20 January 2024
Line 64:		Line 64:
	ssl_certificate /etc/letsencrypt/live/[DOMAIN]/fullchain.pem; # managed by Certbot		ssl_certificate /etc/letsencrypt/live/[DOMAIN]/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/[DOMAIN]/privkey.pem; # managed by Certbot		ssl_certificate_key /etc/letsencrypt/live/[DOMAIN]/privkey.pem; # managed by Certbot

			Once these are added, you can then comment out the fake snakeoil certs.

	== SSL Proxy ==		== SSL Proxy ==

Kenneth: /* Let's Encrypt */

2024-01-20T03:49:36Z

Let's Encrypt

← Older revision		Revision as of 03:49, 20 January 2024
Line 60:		Line 60:
	Have certbot verify and convert the fake to a real:		Have certbot verify and convert the fake to a real:
	certbox		certbox

			Will add the following:
			ssl_certificate /etc/letsencrypt/live/[DOMAIN]/fullchain.pem; # managed by Certbot
			ssl_certificate_key /etc/letsencrypt/live/[DOMAIN]/privkey.pem; # managed by Certbot

	== SSL Proxy ==		== SSL Proxy ==

Kenneth: /* Let's Encrypt */

2024-01-20T03:47:50Z

Let's Encrypt

← Older revision		Revision as of 03:47, 20 January 2024
Line 51:		Line 51:
	server_name [DOMAIN];		server_name [DOMAIN];
	...		...
			include snippets/snakeoil.conf;
	}		}
			</pre>

			Restart and make sure it is hosting the fake ssl cert
			service nginx restart

			Have certbot verify and convert the fake to a real:
			certbox

	== SSL Proxy ==		== SSL Proxy ==

Kenneth: /* SSL */

2024-01-20T03:43:44Z

SSL

← Older revision		Revision as of 03:43, 20 January 2024
Line 38:		Line 38:

	systemctl restart nginx		systemctl restart nginx

			== Let's Encrypt ==

			apt install certbot python3-certbot-nginx

			config:
			<pre>
			server {
			listen 443 ssl default_server;
			listen [::]:443 ssl default_server;
			...
			server_name [DOMAIN];
			...
			}

	== SSL Proxy ==		== SSL Proxy ==

Kenneth: /* SSL */

2024-01-20T03:24:59Z

SSL

@@ Line 22: / Line 22: @@
 If the certs doing exist, regenerate: <ref>https://superuser.com/questions/58149/host-based-snakeoil-certificates-in-ubuntu</ref>
   sudo make-ssl-cert generate-default-snakeoil --force-overwrite
 == SSL Proxy ==

Kenneth: /* Installation */

2024-01-20T03:23:35Z

Installation

← Older revision		Revision as of 03:23, 20 January 2024
Line 8:		Line 8:

	apt install nginx		apt install nginx

			== SSL ==

			Using the default self signed snakoil ssl certs:

			Install the default certs (should already be installed)
			apt install ssl-cert

			Should have the snakeoil certs:
			/etc/ssl/certs/ssl-cert-snakeoil.pem
			/etc/ssl/private/ssl-cert-snakeoil.key

			If the certs doing exist, regenerate: <ref>https://superuser.com/questions/58149/host-based-snakeoil-certificates-in-ubuntu</ref>
			sudo make-ssl-cert generate-default-snakeoil --force-overwrite

	== SSL Proxy ==		== SSL Proxy ==

Kenneth: /* SSL Proxy */

2024-01-19T06:13:26Z

SSL Proxy

← Older revision		Revision as of 06:13, 19 January 2024
Line 18:		Line 18:
	ssl_certificate_key /etc/ssl/DOMAIN/privkey.pem;		ssl_certificate_key /etc/ssl/DOMAIN/privkey.pem;
	location / {		location / {
	proxy_pass http://~~amp.DOMAIN~~:8080;		proxy_pass http://localhost:8080;
	}		}
	}		}

Kenneth: /* SSL Proxy */

2024-01-19T06:09:11Z

SSL Proxy

← Older revision		Revision as of 06:09, 19 January 2024
Line 10:		Line 10:

	== SSL Proxy ==		== SSL Proxy ==

			Simple Example:
			<pre>
			server {
			listen 443 ssl default_server;
			ssl_certificate /etc/ssl/DOMAIN/fullchain.pem;
			ssl_certificate_key /etc/ssl/DOMAIN/privkey.pem;
			location / {
			proxy_pass http://amp.DOMAIN:8080;
			}
			}
			</pre>


	Example:		Example:

Kenneth: /* Nginx */

2024-01-19T05:57:43Z

Nginx

← Older revision		Revision as of 05:57, 19 January 2024
Line 4:		Line 4:

	"Developed by Igor Sysoev in 2002, Nginx was finally released to the public in 2004 and continues to grow in popularity every year. Nginx is an open-sourced, free HTTP server and reverse proxy. It can also act as an IMAP/POP3 server. Benefiting from being fully scalable, Nginx combines the use of a predictable small amount of memory with asynchronous architecture, resulting in a small memory footprint and low resource consumption. Nginx offers a high-performance, stable environment and is currently the chosen web server for WordPress, SourceForge, and TorrentReactor. Nginx is currently the 3rd most popular web server (behind Apache and IIS) with a market share of 7.65% (according to Netcraft’s March 2011 survey)." [http://slodive.com/web-development/lightweight-alternatives-to-apache-and-iis-web-servers/]		"Developed by Igor Sysoev in 2002, Nginx was finally released to the public in 2004 and continues to grow in popularity every year. Nginx is an open-sourced, free HTTP server and reverse proxy. It can also act as an IMAP/POP3 server. Benefiting from being fully scalable, Nginx combines the use of a predictable small amount of memory with asynchronous architecture, resulting in a small memory footprint and low resource consumption. Nginx offers a high-performance, stable environment and is currently the chosen web server for WordPress, SourceForge, and TorrentReactor. Nginx is currently the 3rd most popular web server (behind Apache and IIS) with a market share of 7.65% (according to Netcraft’s March 2011 survey)." [http://slodive.com/web-development/lightweight-alternatives-to-apache-and-iis-web-servers/]

			== Installation ==

			apt install nginx

	== SSL Proxy ==		== SSL Proxy ==

Kenneth at 05:48, 19 January 2024

2024-01-19T05:48:04Z

@@ Line 1: / Line 1: @@
 Pronounced "Engine X"
 "Developed by Igor Sysoev in 2002, Nginx was finally released to the public in 2004 and continues to grow in popularity every year. Nginx is an open-sourced, free HTTP server and reverse proxy. It can also act as an IMAP/POP3 server. Benefiting from being fully scalable, Nginx combines the use of a predictable small amount of memory with asynchronous architecture, resulting in a small memory footprint and low resource consumption. Nginx offers a high-performance, stable environment and is currently the chosen web server for WordPress, SourceForge, and TorrentReactor. Nginx is currently the 3rd most popular web server (behind Apache and IIS) with a market share of 7.65% (according to Netcraft’s March 2011 survey)." [http://slodive.com/web-development/lightweight-alternatives-to-apache-and-iis-web-servers/]
 == keywords ==