diff options
Diffstat (limited to 'terminaldweller.com/cargo')
-rw-r--r-- | terminaldweller.com/cargo/docker-compose.yaml | 5 | ||||
-rw-r--r-- | terminaldweller.com/cargo/nginx.conf | 6 |
2 files changed, 8 insertions, 3 deletions
diff --git a/terminaldweller.com/cargo/docker-compose.yaml b/terminaldweller.com/cargo/docker-compose.yaml index ef2e1b8..7cbb5d9 100644 --- a/terminaldweller.com/cargo/docker-compose.yaml +++ b/terminaldweller.com/cargo/docker-compose.yaml @@ -12,7 +12,12 @@ services: volumes: - ./nginx.conf:/etc/nginx/nginx.conf:ro - /home/ubuntu/cargo:/cargo + - /etc/letsencrypt/archive/cargo.terminaldweller.com/:/certs/ cap_drop: - ALL + cap_add: + - CHOWN + - SETGID + - SETUID networks: cargonet: diff --git a/terminaldweller.com/cargo/nginx.conf b/terminaldweller.com/cargo/nginx.conf index 118825c..eafeeee 100644 --- a/terminaldweller.com/cargo/nginx.conf +++ b/terminaldweller.com/cargo/nginx.conf @@ -3,10 +3,10 @@ events { } http { server { - listen 8080 ssl; + listen 8080 ssl http2; keepalive_timeout 70; - ssl_certificate /certs/server.cert; - ssl_certificate_key /certs/server.key; + ssl_certificate /certs/cert1.pem; + ssl_certificate_key /certs/privkey1.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; sendfile on; |