Last active
November 5, 2018 11:05
-
-
Save tudou-wp/88c88cb0d4de64343e5a47ca72554a6a to your computer and use it in GitHub Desktop.
lnmp-ssl-vhost.conf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
server { | |
listen 80; | |
server_name example.suffix www.example.suffix; | |
location ^~ /.well-known/acme-challenge/ { | |
alias /home/wwwroot/www.example.suffix/.well-known/acme-challenge/; | |
try_files $uri = 404; | |
} | |
location / { | |
return 301 https://www.example.suffix$request_uri; | |
} | |
} | |
server | |
{ | |
listen 443 ssl http2; | |
#listen [::]:443 ssl http2; | |
server_name www.example.suffix example.suffix; | |
index index.html index.htm index.php default.html default.htm default.php; | |
root /home/wwwroot/www.example.suffix; | |
ssl on; | |
ssl_certificate /home/wwwcert/example.suffix/example.chained.crt; | |
ssl_certificate_key /home/wwwcert/example.suffix/example.suffix.key; | |
ssl_session_timeout 5m; | |
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; | |
ssl_prefer_server_ciphers on; | |
ssl_ciphers "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5"; | |
ssl_session_cache builtin:1000 shared:SSL:10m; | |
ssl_dhparam /home/wwwcert/example.suffix/dhparam.pem; | |
include rewrite/wordpress.conf; | |
#error_page 404 /404.html; | |
#Deny access to PHP files in specific directory | |
location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; } | |
include enable-php-pathinfo.conf; | |
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ | |
{ | |
expires 30d; | |
} | |
location ~ .*\.(js|css)?$ | |
{ | |
expires 12h; | |
} | |
location ~ /.well-known { | |
allow all; | |
} | |
location ~ /\. | |
{ | |
deny all; | |
} | |
access_log /home/wwwlogs/www.example.suffix.log; | |
error_log /home/wwwlogs/www.example.suffix_error.log; | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment