envs
/
ops
mirror of https://git.envs.net/envs/ops.git
1
0
Fork 0
Code Releases Activity

update configs from server - incl. nginx tlsv1.3

This commit is contained in:
creme 2020-06-02 09:12:49 +00:00
parent d61858fcc0
commit 91bad5818e
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/init.d/S41firewall
View File

@ -357,6 +357,7 @@ if [ "$1" = "start" ]; then
# prometheus node
$IPT -w -A INPUT -m state --state NEW -d 192.168.1.1 -s 192.168.1.6 -p tcp --dport 9100 -j ACCEPT
$IPT -w -A INPUT -m state --state NEW -d 192.168.1.1 -s 192.168.1.6 -p tcp --dport 9113 -j ACCEPT
# finger
$IPT -w -A INPUT -m state --state NEW -d 89.163.145.170 -p tcp --dport 79 -j ACCEPT

3
etc/nginx/sites-available/envs.net.conf
View File

@ -1,10 +1,11 @@
### ENVS.NET - local ###
server {
listen 89.163.145.170:80 default_server;
listen 192.168.1.1:80;
include snippets/listen_local.conf;
# include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name envs.net www.envs.net 89.163.145.170 127.0.0.1 localhost _;
server_name envs.net www.envs.net 89.163.145.170 192.168.1.1 127.0.0.1 localhost _;
error_log /var/log/nginx/envs.net-error.log crit;

4
etc/nginx/snippets/ssl.conf
View File

@ -1,5 +1,5 @@
ssl_protocols TLSv1.2;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:HIGH:!aNULL:!MD5';
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_verify_depth 3;