ip

cert.renew

@@ -0,0 +1,3 @@
+#!/bin/bash
+# https://habr.com/ru/articles/735712/
+certbot certonly --manual --preferred-challenges http -d "kornerr.ru"

cert.setup

@@ -0,0 +1,3 @@
+#!/bin/bash
+# https://habr.com/ru/articles/735712/
+brew install certbot

nginx/cfg

@@ -1,11 +1,17 @@
+# Redirect HTTP to HTTPS
 server {
-  listen 80 default_server;
-  listen [::]:80 default_server;
+  listen 80;
+  server_name kornerr.ru;
+  return 301 https://$server_name$request_uri;
+}
+
+server {
+  listen 443 ssl;
+  server_name kornerr.ru;
+
+  ssl_certificate /etc/encrypt/fullchain.pem;
+  ssl_certificate_key /etc/encrypt/privkey.pem;
 
-  # SSL configuration
-  #
-  # listen 443 ssl default_server;
-  # listen [::]:443 ssl default_server;
   #
   # Note: You should disable gzip for SSL traffic.
   # See: https://bugs.debian.org/773332

squid/cfg

@@ -1,4 +1,4 @@
-acl tul src 83.221.16.86
+acl tul src 83.221.16.80
 http_access allow tul
 http_access deny all
 http_port 3128