make file fix

scripts/setup-nginx.sh

@@ -5,35 +5,11 @@ set -e
 
 echo "⚙️ Настройка nginx конфигурации..."
 
-# Создание конфигурации nginx
+# Создание конфигурации nginx (HTTP-only для начала)
 sudo tee /etc/nginx/sites-available/links > /dev/null << 'EOF'
 server {
     listen 80;
-    server_name links.shareon.kr sharon.kr;
-
-    # Redirect all HTTP requests to HTTPS
-    return 301 https://$server_name$request_uri;
-}
-
-server {
-    listen 443 ssl http2;
-    server_name links.shareon.kr sharon.kr;
-
-    # SSL certificates (will be configured by certbot)
-    # ssl_certificate /etc/letsencrypt/live/links.shareon.kr/fullchain.pem;
-    # ssl_certificate_key /etc/letsencrypt/live/links.shareon.kr/privkey.pem;
-
-    # Modern SSL configuration
-    ssl_protocols TLSv1.2 TLSv1.3;
-    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
-    ssl_prefer_server_ciphers off;
-    ssl_session_cache shared:SSL:10m;
-
-    # Security headers
-    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-    add_header X-Frame-Options DENY;
-    add_header X-Content-Type-Options nosniff;
-    add_header X-XSS-Protection "1; mode=block";
+    server_name links.shareon.kr sharon.kr localhost;
 
     # Proxy to frontend (Next.js)
     location / {
@@ -82,10 +58,16 @@ server {
         expires 1y;
         add_header Cache-Control "public";
     }
+
+    # Let's Encrypt challenge
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
 }
 EOF
 
 echo "🔗 Активация конфигурации nginx..."
+sudo mkdir -p /var/www/html
 sudo ln -sf /etc/nginx/sites-available/links /etc/nginx/sites-enabled/
 sudo rm -f /etc/nginx/sites-enabled/default
 
@@ -97,3 +79,10 @@ sudo systemctl restart nginx
 sudo systemctl enable nginx
 
 echo "✅ nginx настройка завершена"
+echo ""
+echo "📝 Для настройки SSL выполните:"
+echo "   make ssl-cert"
+echo ""
+echo "🌐 Временно доступно по HTTP:"
+echo "   http://links.shareon.kr (если DNS настроен)"
+echo "   http://localhost (локально)"