feat(app): add ssl

This commit is contained in:
Sergey Krylov 2023-08-17 22:06:28 +03:00
parent 778926b879
commit f48eb307e9
3 changed files with 170 additions and 16 deletions

View File

@ -1,21 +1,32 @@
server { server {
server_name localhost; server_name arkids.ru;
location / {
proxy_pass http://arkids-main-frontend-production:3000;
# Allow the use of websockets
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
location /api {
proxy_pass http://arkids-main-backend-production:5000;
}
listen 80; listen 80;
listen [::]:80; listen [::]:80;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name arkids.ru;
ssl_certificate /etc/nginx/ssl/arkids.ru.crt;
ssl_certificate_key /etc/nginx/ssl/arkids.ru.key;
location / {
proxy_pass http://arkids-main-frontend-production:3000;
# Allow the use of websockets
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
location /api {
proxy_pass http://arkids-main-backend-production:5000;
}
} }

92
ssl/arkids.ru.crt Normal file
View File

@ -0,0 +1,92 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

51
ssl/arkids.ru.key Normal file
View File

@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----