deadcxap/init_scripts
1
0
Fork 0
mirror of https://github.com/deadcxap/init_scripts.git synced 2026-07-02 05:43:40 +03:00
Code Issues Packages Projects Releases Wiki Activity

add node dir - node init compose

Browse Source 
rename core.sh to setup.sh
This commit is contained in:
deadcxap
2025-08-24 03:02:41 +03:00
parent 73162ba31c
commit ce4c60ed02
6 changed files with 117 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
node/bootstrap/nginx.conf
+32
View File
@@ -0,0 +1,32 @@
map $http_upgrade $connection_upgrade {
default upgrade;
"" close;
}
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ecdh_curve X25519:prime256v1:secp384r1;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
ssl_prefer_server_ciphers on;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
server {
server_name app.cxap.quest;
listen unix:/dev/shm/nginx.sock ssl proxy_protocol;
http2 on;
ssl_certificate "/etc/nginx/ssl/node/fullchain.pem";
ssl_certificate_key "/etc/nginx/ssl/node/privkey.pem";
ssl_trusted_certificate "/etc/nginx/ssl/node/fullchain.pem";
root /var/www/html;
index index.html;
}
server {
listen unix:/dev/shm/nginx.sock ssl proxy_protocol default_server;
server_name _;
ssl_reject_handshake on;
return 444;
}