文件操作 - erichsen.it.ssl.conf

文件: /root/sh/etc/nginx_OLD/conf.d/vhosts/erichsen.it.ssl.conf

编辑文件内容

server {
	listen 5.249.157.183:443 ssl ;
	server_name erichsen.it  www.erichsen.it;
	root /home/tecnowp/public_html/erichsen--it;
	index index.php index.html index.htm;
	access_log /usr/local/apache/domlogs/erichsen.it.bytes bytes;
	access_log /usr/local/apache/domlogs/erichsen.it.log combined;
	error_log /usr/local/apache/domlogs/erichsen.it.error.log error;

ssl_certificate      /etc/pki/tls/certs/erichsen.it.bundle;
	ssl_certificate_key  /etc/pki/tls/private/erichsen.it.key;
	ssl_protocols TLSv1.2;
	ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA!RC4:EECDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;
	ssl_prefer_server_ciphers   on;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {

add_header Strict-Transport-Security "max-age=31536000";
		add_header X-XSS-Protection "1; mode=block" always;
		add_header X-Content-Type-Options "nosniff" always;

location ~.*\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {			
			expires max;
		}
		
		location ~ [^/]\.php(/|$) {
			fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
			if (!-f $document_root$fastcgi_script_name) {
				return  404;
			}

fastcgi_pass    unix:/opt/alt/php-fpm73/usr/var/sockets/tecnowp.sock;
			fastcgi_index   index.php;
			include         /etc/nginx/fastcgi_params;
		}

}

location ~* "/\.(htaccess|htpasswd)$" {deny all;return 404;}

disable_symlinks if_not_owner from=/home/tecnowp/public_html/erichsen--it;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

server {
	listen 5.249.157.183:443 ssl ;	
	server_name webmail.erichsen.it;

access_log /usr/local/apache/domlogs/erichsen.it.bytes bytes;
	access_log /usr/local/apache/domlogs/erichsen.it.log combined;
	error_log /usr/local/apache/domlogs/erichsen.it.error.log error;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {
		proxy_pass  http://127.0.0.1:2095;
		include proxy.inc;
	}

location ~ /\.ht    {deny all;}
	location ~ /\.svn/  {deny all;}
	location ~ /\.git/  {deny all;}
	location ~ /\.hg/   {deny all;}
	location ~ /\.bzr/  {deny all;}

disable_symlinks if_not_owner from=/home/tecnowp/public_html/erichsen--it;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

server {
	listen 5.249.157.183:443 ssl ;	
	server_name mail.erichsen.it;

access_log /usr/local/apache/domlogs/erichsen.it.bytes bytes;
	access_log /usr/local/apache/domlogs/erichsen.it.log combined;
	error_log /usr/local/apache/domlogs/erichsen.it.error.log error;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {
		proxy_pass  http://127.0.0.1:2095;
		include proxy.inc;
	}

location ~ /\.ht    {deny all;}
	location ~ /\.svn/  {deny all;}
	location ~ /\.git/  {deny all;}
	location ~ /\.hg/   {deny all;}
	location ~ /\.bzr/  {deny all;}

disable_symlinks if_not_owner from=/home/tecnowp/public_html/erichsen--it;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

server {
	listen 5.249.157.183:443 ssl ;	
	server_name cpanel.erichsen.it;

access_log /usr/local/apache/domlogs/erichsen.it.bytes bytes;
	access_log /usr/local/apache/domlogs/erichsen.it.log combined;
	error_log /usr/local/apache/domlogs/erichsen.it.error.log error;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {
		proxy_pass  https://127.0.0.1:2083;
		include proxy.inc;
	}

location /pma {
		proxy_pass  https://127.0.0.1:2031;
		include proxy.inc;
	}

location /roundcube {
		proxy_pass  https://127.0.0.1:2031;
		include proxy.inc;
	}

location ~ /\.ht    {deny all;}
	location ~ /\.svn/  {deny all;}
	location ~ /\.git/  {deny all;}
	location ~ /\.hg/   {deny all;}
	location ~ /\.bzr/  {deny all;}

disable_symlinks if_not_owner from=/home/tecnowp/public_html/erichsen--it;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

文件操作 - erichsen.it.ssl.conf

文件: /root/sh/etc/nginx_OLD/conf.d/vhosts/erichsen.it.ssl.conf

编辑文件内容

修改文件时间

删除文件