add whole nginx config

1 files changed, 25 insertions, 0 deletions

diff --git a/etc/nginx/sites-enabled/exchange-demo-ssl.site b/etc/nginx/sites-enabled/exchange-demo-ssl.site
new file mode 100644
index 0000000..5761d4f
--- /dev/null
+++ b/etc/nginx/sites-enabled/exchange-demo-ssl.site
@@ -0,0 +1,25 @@
+server {
+	listen   443 ssl; ## listen for ipv4; this line is default and implied
+ 	# 	listen   [::]:80 default_server ipv6only=on; ## listen for ipv6
+
+	root /dev/null;
+
+	server_name exchange.demo.taler.net;
+
+	ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem;
+	ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem;
+	ssl_prefer_server_ciphers on;
+        ssl_session_cache shared:SSL:10m;
+        ssl_dhparam /etc/ssl/certs/dhparam.pem;
+	ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
+	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+	add_header Strict-Transport-Security "max-age=63072000; preload";
+
+	location / {
+	    proxy_pass http://localhost:4241;
+	    proxy_redirect off;
+	    proxy_set_header Host $host;
+	}
+
+}