Skip to content

Instantly share code, notes, and snippets.

@Austio
Last active September 3, 2018 19:22
Show Gist options
  • Save Austio/6399964 to your computer and use it in GitHub Desktop.
Save Austio/6399964 to your computer and use it in GitHub Desktop.
Configure NGINX for SSL using unicorn and gzip assets optimizations
1. Open a command prompt and navigate to /etc/nginx/ssl
2. Issue "openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr"
3. Get your certificate issued - Go to your certificate authority and give them the CSR (server.csr)
4. Copy your new crt (that the certificate authority issued) to the /etc/nginx/ssl and give it read priveledges
5. Reconfigure your nginx.conf, here is mine. The first part redirects 80 to 443, the second part listens to 443 and is optimized to return Ruby on Rails application requests using gzip and unicorn.
upstream unicorn{
server unix:/tmp/unicorn.domain.sock fail_timeout=0;
}
server {
listen 80;
server_name domain.com;
return 301 https://$host$request_uri;
}
server {
listen 443 default;
server_name domain.com;
root /your_root_path/public;
try_files $uri/index.html $uri @unicorn;
ssl on;
ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;
location ^~ /assets/ {
gzip_static on;
expires max;
add_header Cache-Control public;
}
location @unicorn {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Proto https; # New header for SSL
proxy_redirect off;
proxy_pass http://unicorn;
}
error_page 500 502 503 504 /500.html;
client_max_body_size 4G;
keepalive_timeout 10;
}
@stuzero
Copy link

stuzero commented Nov 19, 2014

Add for POODLE:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

@jerrylau91
Copy link

牛逼!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment