From 2a470306ce52d4a69e0671b46fbc2909950defd4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB=20=D0=9A=D0=B0=D0=BF?= =?UTF-8?q?=D0=B5=D0=BB=D1=8C=D0=BA=D0=BE?= Date: Fri, 5 Sep 2025 22:45:49 +0300 Subject: [PATCH 2/6] domain nginx --- nginx/cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginx/cfg b/nginx/cfg index 079181e..8d92d72 100644 --- a/nginx/cfg +++ b/nginx/cfg @@ -23,7 +23,7 @@ server { # Add index.php to the list if you are using PHP index index.html; - server_name _; + server_name kornerr.ru www.kornerr.ru; location / { # First attempt to serve request as file, then -- 2.34.1 From 58e384b02cc188e326ba8d491316f28795e3418a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB=20=D0=9A=D0=B0=D0=BF?= =?UTF-8?q?=D0=B5=D0=BB=D1=8C=D0=BA=D0=BE?= Date: Fri, 5 Sep 2025 22:51:38 +0300 Subject: [PATCH 3/6] unused --- nginx/cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginx/cfg b/nginx/cfg index 8d92d72..079181e 100644 --- a/nginx/cfg +++ b/nginx/cfg @@ -23,7 +23,7 @@ server { # Add index.php to the list if you are using PHP index index.html; - server_name kornerr.ru www.kornerr.ru; + server_name _; location / { # First attempt to serve request as file, then -- 2.34.1 From dd7f08ffcd8f8e2c677014d8ef2db8b27aae40f0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB=20=D0=9A=D0=B0=D0=BF?= =?UTF-8?q?=D0=B5=D0=BB=D1=8C=D0=BA=D0=BE?= Date: Fri, 5 Sep 2025 22:56:28 +0300 Subject: [PATCH 4/6] install certbot --- cert.setup | 3 +++ 1 file changed, 3 insertions(+) create mode 100755 cert.setup diff --git a/cert.setup b/cert.setup new file mode 100755 index 0000000..a2323f6 --- /dev/null +++ b/cert.setup @@ -0,0 +1,3 @@ +#!/bin/bash +# https://habr.com/ru/articles/735712/ +brew install certbot -- 2.34.1 From 62232d6828ac7b1f10c68c50b733525cfd65808d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB=20=D0=9A=D0=B0=D0=BF?= =?UTF-8?q?=D0=B5=D0=BB=D1=8C=D0=BA=D0=BE?= Date: Fri, 5 Sep 2025 23:28:47 +0300 Subject: [PATCH 5/6] add cert --- cert.renew | 3 +++ nginx/cfg | 18 ++++++++++++------ 2 files changed, 15 insertions(+), 6 deletions(-) create mode 100755 cert.renew diff --git a/cert.renew b/cert.renew new file mode 100755 index 0000000..e5907d4 --- /dev/null +++ b/cert.renew @@ -0,0 +1,3 @@ +#!/bin/bash +# https://habr.com/ru/articles/735712/ +certbot certonly --manual --preferred-challenges http -d "kornerr.ru" diff --git a/nginx/cfg b/nginx/cfg index 079181e..834b7c1 100644 --- a/nginx/cfg +++ b/nginx/cfg @@ -1,11 +1,17 @@ +# Redirect HTTP to HTTPS server { - listen 80 default_server; - listen [::]:80 default_server; + listen 80; + server_name kornerr.ru; + return 301 https://$server_name$request_uri; +} + +server { + listen 443 ssl; + server_name kornerr.ru; + + ssl_certificate /etc/encrypt/fullchain.pem; + ssl_certificate_key /etc/encrypt/privkey.pem; - # SSL configuration - # - # listen 443 ssl default_server; - # listen [::]:443 ssl default_server; # # Note: You should disable gzip for SSL traffic. # See: https://bugs.debian.org/773332 -- 2.34.1 From 42b823dd3195a7af0ffb89da1dbd015887ec228b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB=20=D0=9A=D0=B0=D0=BF?= =?UTF-8?q?=D0=B5=D0=BB=D1=8C=D0=BA=D0=BE?= Date: Sat, 20 Sep 2025 23:14:58 +0300 Subject: [PATCH 6/6] ip --- squid/cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/squid/cfg b/squid/cfg index e2203c2..9f3c130 100644 --- a/squid/cfg +++ b/squid/cfg @@ -1,4 +1,4 @@ -acl tul src 83.221.16.86 +acl tul src 83.221.16.80 http_access allow tul http_access deny all http_port 3128 -- 2.34.1