diff --git a/nginx_default b/nginx_default new file mode 100644 index 0000000..c8e6051 --- /dev/null +++ b/nginx_default @@ -0,0 +1,81 @@ +# verimundsolutions.com - website (Next.js, coming later) +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name verimundsolutions.com; + + ssl_certificate /etc/letsencrypt/live/verimundsolutions.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/verimundsolutions.com/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + location / { + return 200 'Coming soon'; + add_header Content-Type text/plain; + } +} + +# api.verimundsolutions.com - API server +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name api.verimundsolutions.com; + + ssl_certificate /etc/letsencrypt/live/verimundsolutions.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/verimundsolutions.com/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + location / { + proxy_pass http://localhost:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} + +# git.verimundsolutions.com - Gitea +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name git.verimundsolutions.com; + + ssl_certificate /etc/letsencrypt/live/git.verimundsolutions.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/git.verimundsolutions.com/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + location / { + proxy_pass http://localhost:3000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} + +# admin.verimundsolutions.com - Admin panel (coming later) +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name admin.verimundsolutions.com; + + ssl_certificate /etc/letsencrypt/live/git.verimundsolutions.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/git.verimundsolutions.com/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + location / { + return 200 'Admin coming soon'; + add_header Content-Type text/plain; + } +} + +# Redirect all HTTP to HTTPS +server { + listen 80; + listen [::]:80; + server_name verimundsolutions.com api.verimundsolutions.com git.verimundsolutions.com admin.verimundsolutions.com; + return 301 https://$host$request_uri; +}