diff --git a/scripts/setup-nginx.sh b/scripts/setup-nginx.sh index 4d994c1..d00dbca 100755 --- a/scripts/setup-nginx.sh +++ b/scripts/setup-nginx.sh @@ -5,35 +5,11 @@ set -e echo "⚙️ Настройка nginx конфигурации..." -# Создание конфигурации nginx +# Создание конфигурации nginx (HTTP-only для начала) sudo tee /etc/nginx/sites-available/links > /dev/null << 'EOF' server { listen 80; - server_name links.shareon.kr sharon.kr; - - # Redirect all HTTP requests to HTTPS - return 301 https://$server_name$request_uri; -} - -server { - listen 443 ssl http2; - server_name links.shareon.kr sharon.kr; - - # SSL certificates (will be configured by certbot) - # ssl_certificate /etc/letsencrypt/live/links.shareon.kr/fullchain.pem; - # ssl_certificate_key /etc/letsencrypt/live/links.shareon.kr/privkey.pem; - - # Modern SSL configuration - ssl_protocols TLSv1.2 TLSv1.3; - ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384; - ssl_prefer_server_ciphers off; - ssl_session_cache shared:SSL:10m; - - # Security headers - add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; - add_header X-Frame-Options DENY; - add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; + server_name links.shareon.kr sharon.kr localhost; # Proxy to frontend (Next.js) location / { @@ -82,10 +58,16 @@ server { expires 1y; add_header Cache-Control "public"; } + + # Let's Encrypt challenge + location /.well-known/acme-challenge/ { + root /var/www/html; + } } EOF echo "🔗 Активация конфигурации nginx..." +sudo mkdir -p /var/www/html sudo ln -sf /etc/nginx/sites-available/links /etc/nginx/sites-enabled/ sudo rm -f /etc/nginx/sites-enabled/default @@ -96,4 +78,11 @@ echo "🔄 Перезапуск nginx..." sudo systemctl restart nginx sudo systemctl enable nginx -echo "✅ nginx настройка завершена" \ No newline at end of file +echo "✅ nginx настройка завершена" +echo "" +echo "📝 Для настройки SSL выполните:" +echo " make ssl-cert" +echo "" +echo "🌐 Временно доступно по HTTP:" +echo " http://links.shareon.kr (если DNS настроен)" +echo " http://localhost (локально)" \ No newline at end of file