merchant

Merchant backend to process payments, run by merchants
Log | Files | Refs | Submodules | README | LICENSE

taler-merchant (1542B)

      1 server {
      2     # NOTE:
      3     # - urgently consider configuring TLS instead
      4     # - maybe keep a forwarder from HTTP to HTTPS
      5     listen 80;
      6 
      7     # NOTE:
      8     # - Comment out this line if you have no IPv6
      9     listen [::]:80;
     10 
     11     # NOTE:
     12     # - replace with your actual server name
     13     server_name %%your.domain%%;
     14 
     15     access_log /var/log/nginx/merchant.log;
     16     error_log /var/log/nginx/merchant.err;
     17 
     18     location / {
     19          proxy_pass http://unix:/var/run/taler-merchant/httpd/merchant-http.sock;
     20          proxy_redirect off;
     21          proxy_set_header Host $host;
     22 
     23          # NOTE:
     24          # - put your actual DNS name here
     25          proxy_set_header X-Forwarded-Host "%%your.domain%%";
     26          proxy_set_header X-Forwarded-Proto "http";
     27     }
     28 }
     29 
     30 server {
     31     # NOTE:
     32     # - This block provides the TLS/HTTPS configuration
     33     listen 443 ssl;
     34     listen [::]:443 ssl;
     35 
     36     # NOTE:
     37     # - replace with your actual server name
     38     server_name %%your.domain%%;
     39 
     40     ssl_certificate /etc/letsencrypt/live/%%your.domain%%/fullchain.pem;
     41     ssl_certificate_key /etc/letsencrypt/live/%%your.domain%%/privkey.pem;
     42 
     43     access_log /var/log/nginx/merchant.log;
     44     error_log /var/log/nginx/merchant.err;
     45 
     46     location / {
     47         proxy_pass http://unix:/var/run/taler-merchant/httpd/merchant-http.sock;
     48         proxy_redirect off;
     49         proxy_set_header Host $host;
     50 
     51         # NOTE:
     52         # - put your actual DNS name here
     53         proxy_set_header X-Forwarded-Host "%%your.domain%%";
     54         proxy_set_header X-Forwarded-Proto "https";
     55     }
     56 }