Wiki source code of Установка SSL/TLS сертификатов для сайта filarmonica.md
Last modified by Chiorescu Gheorghe on 2026/01/21 09:55
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | To install SSL/TLS certificates for the filarmonica.md website, you need to request and install the certificate on the hosting. | ||
| 2 | [[image:1.jpg||height="80%" width="80%"]] | ||
| 3 | [[image:2.jpg||height="80%" width="80%"]] | ||
| 4 | [[image:3.jpg||height="80%" width="80%"]] | ||
| 5 | [[image:4.jpg||height="80%" width="80%"]] | ||
| 6 | [[image:5.jpg||height="80%" width="80%"]] | ||
| 7 | Overwrite the certificate on the UNA web server: | ||
| 8 | [[image:6.jpg||height="60%" width="60%"]] | ||
| 9 | No changes need to be made to the config /etc/nginx/conf.d/filarmonica.md.conf, only overwrite these certificates and restart the server. | ||
| 10 | (% style="font-size: 14px; font-family: Consolas; background-color:#fbfdff" %) | ||
| 11 | server { | ||
| 12 | listen 192.168.0.148:443 ssl ; | ||
| 13 | (% style="font-size: 14px; font-family: Consolas; background-color:#fbfdff" %) | ||
| 14 | # charset windows-1251; | ||
| 15 | # charset utf-8; | ||
| 16 | (% style="font-size: 14px; font-family: Consolas; background-color:#fbfdff" %) | ||
| 17 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv2 SSLv3; | ||
| 18 | ssl_ciphers ****************************************; | ||
| 19 | (% style="font-size: 14px; font-family: Consolas; background-color:#fbfdff" %) | ||
| 20 | ssl_prefer_server_ciphers on; | ||
| 21 | ssl_session_cache shared:SSL:10m; | ||
| 22 | ssl_dhparam /etc/ssl/certs/dhparam.pem; | ||
| 23 | ssl_certificate /etc/ssl/localcerts/filfull.crt; # managed by Certbot | ||
| 24 | ssl_certificate_key /etc/ssl/localcerts/filpriv.key; # managed by Certbot | ||
| 25 | server_name tickets.filarmonica.md www.filarmonica.md filarmonica.md; | ||
| 26 | #error_page 502 /error-down.html; | ||
| 27 | #location = /error-down.html { | ||
| 28 | # root /usr/share/nginx/html; | ||
| 29 | #} | ||
| 30 | access_log /var/log/nginx/ssl_filarmonica.md.access.log main; | ||
| 31 | error_log /var/log/nginx/ssl_filarmonica.md.error.log warn; | ||
| 32 | client_max_body_size 64m; | ||
| 33 | include conf.d/filarmonica.inc; | ||
| 34 | location / { | ||
| 35 | proxy_pass https://217.26.150.23:443; | ||
| 36 | include proxy_setings.inc; | ||
| 37 | } | ||
| 38 | |||
| 39 | sudo systemctl restart nginx |