...
WARNING: Do not change the https nginx configurations unless you know what you are doing.
Code Block |
---|
server { |
...
server_name experiments.jcsda.org; |
...
proxy_buffering off; |
...
location / { |
...
proxy_pass http://localhost:8866; |
...
proxy_set_header Host $host; |
...
proxy_set_header X-Real-IP $remote_addr; |
...
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
...
proxy_http_version 1.1; |
...
proxy_set_header Upgrade $http_upgrade; |
...
proxy_set_header Connection "upgrade"; |
...
proxy_read_timeout 86400; |
...
} |
...
client_max_body_size 100M; |
...
error_log /var/log/nginx/error.log; |
...
listen 443 ssl; # managed by Certbot |
...
ssl_certificate /etc/letsencrypt/live/experiments.jcsda.org/fullchain.pem; # managed by Certbot |
...
ssl_certificate_key /etc/letsencrypt/live/experiments.jcsda.org/privkey.pem; # managed by Certbot |
...
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot |
...
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot |
...
} |
...
server { |
...
if ($host = experiments.jcsda.org) { |
...
return 301 https://$host$request_uri; |
...
} # managed by Certbot |
...
listen 80; |
...
server_name experiments.jcsda.org; |
...
return 301 https://$host$request_uri; |
...
# return 404; # managed by Certbot |
...
} |
Procedures
Reboot EC2 Instance
...