mirror of
https://github.com/krislamo/vagrant-easyredmine
synced 2025-11-04 00:38:34 +00:00
30 lines
1.1 KiB
Django/Jinja
30 lines
1.1 KiB
Django/Jinja
server {
|
|
listen 80;
|
|
{% if is_production_vm %}
|
|
server_name redmine.apidb.org;
|
|
{% else %}
|
|
server_name {{ ansible_fqdn }};
|
|
{% endif %}
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443;
|
|
{% if is_production_vm %}
|
|
server_name redmine.apidb.org;
|
|
{% else %}
|
|
server_name {{ ansible_fqdn }};
|
|
{% endif %}
|
|
|
|
ssl on;
|
|
ssl_certificate /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
|
|
ssl_certificate_key /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
|
|
ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:!DSS:!DH+3DES;
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
root {{ redmine_root_dir }}/public;
|
|
passenger_enabled on;
|
|
client_max_body_size 50M;
|
|
}
|