Nginx https

SSL Certifikat erstellen

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt

Website mit Zertifikat verknüpfen

• vim /etc/nginx/sites-available/website

server {
    listen 80;
    server_name www.it113.int;

    return 301 https://$host$request_uri;

}

server {
    listen 443 ssl;
    server_name www.it113.int;
    listen [::]:443;

    ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
    ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;


    root /var/www/html/website;
    index index.html index.htm;

    server_name _;

    location / {
        try_files $uri $uri/ =404;

    }

}