Scribd Logo
Upload

Welcome to Scribd!

  • 33 views

    Note Today

    Uploaded by

    pham thuat
    The document discusses configuring an Nginx server with SSL/TLS encryption and authentication. It provides Nginx configuration code to enable HTTPS, set SSL ciphers and protocols, add HSTS headers, and password protect the server with HTTP authentication.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd

    Note Today

    Uploaded by

    pham thuat
    33 views3 pages
    The document discusses configuring an Nginx server with SSL/TLS encryption and authentication. It provides Nginx configuration code to enable HTTPS, set SSL ciphers and protocols, add HSTS headers, and password protect the server with HTTP authentication.

    Original Description:

    abc test

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses configuring an Nginx server with SSL/TLS encryption and authentication. It provides Nginx configuration code to enable HTTPS, set SSL ciphers and protocols, add HSTS headers, and password protect the server with HTTP authentication.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    33 views3 pages

    Note Today

    Uploaded by

    pham thuat
    The document discusses configuring an Nginx server with SSL/TLS encryption and authentication. It provides Nginx configuration code to enable HTTPS, set SSL ciphers and protocols, add HSTS headers, and password protect the server with HTTP authentication.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    of 3

    1.

    hoc 1 bai python


    2. tim ngach, lua 1 sp
    3. tim trends 2019

    LA token:
    https://airdrop.latoken.com/invite/0dwQ4uBcfEzQZwds

    nano /etc/nginx/cd /cd khoa


    www.khoahocsuckhoe.net.conf
    cd
    nano /etc/nginx/conf.d/khoahocsuckhoe.net.conf

    //
    # SSL
    ssl_certificate /etc/letsencrypt/live/www.khoahocsuckhoe.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.khoahocsuckhoe.net/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers
    EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:
    !MD5;

    # Improve HTTPS performance with session resumption


    ssl_session_cache shared:SSL:50m;
    ssl_session_timeout 1d;

    # DH parameters
    ssl_dhparam /etc/nginx/ssl/dhparam.pem;
    # Enable HSTS
    add_header Strict-Transport-Security "max-age=31536000" always;

    //

    server {
    listen 443 ssl;
    server_name www.khoahocsuckhoe.net;

    # SSL
    ssl_certificate /etc/letsencrypt/live/khoahocsuckhoe.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/khoahocsuckhoe.net/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers
    EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:
    !MD5;

    rewrite ^(.*) https://khoahocsuckhoe.net$1 permanent;


    }

    IMPORTANT NOTES:
    - Congratulations! Your certificate and chain have been saved at:
    /etc/letsencrypt/live/khoahocsuckhoe.net/fullchain.pem
    Your key file has been saved at:
    /etc/letsencrypt/live/khoahocsuckhoe.net/privkey.pem
    Your cert will expire on 2019-10-03. To obtain a new or tweaked
    version of this certificate in the future, simply run certbot-auto
    again. To non-interactively renew *all* of your certificates, run
    "certbot-auto renew"
    - If you like Certbot, please consider supporting our work by:

    Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate


    Donating to EFF: https://eff.org/donate-le

    //

    server {
    listen 2179 ssl;

    access_log off;
    log_not_found off;
    error_log /home/www.khoahocsuckhoe.net/logs/nginx_error.log;

    root /home/hocvps.com/private_html;
    index index.php index.html index.htm;
    server_name hocvps.com;

    error_page 497 https://$server_name:$server_port$request_uri;

    ssl_certificate /etc/letsencrypt/live/khoahocsuckhoe.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/khoahocsuckhoe.net/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers
    EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:
    !MD5;

    auth_basic "Restricted";
    auth_basic_user_file /home/hocvps.com/private_html/hocvps/.htpasswd;
    location / {
    autoindex on;
    try_files $uri $uri/ /index.php;
    }

    location ~ \.php$ {
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    include /etc/nginx/fastcgi_params;
    fastcgi_pass 127.0.0.1:9000;
    fastcgi_index index.php;
    fastcgi_connect_timeout 1000;
    fastcgi_send_timeout 1000;
    fastcgi_read_timeout 1000;
    fastcgi_buffer_size 256k;
    fastcgi_buffers 4 256k;
    fastcgi_busy_buffers_size 256k;
    fastcgi_temp_file_write_size 256k;
    fastcgi_intercept_errors on;
    fastcgi_param SCRIPT_FILENAME
    /home/khoahocsuckhoe.net/private_html$fastcgi_script_name;
    }

    location ~ /\. {
    deny all;
    }
    }

    You might also like