diff --git a/conf/includes/desktop-h6jg91b.conf b/conf/includes/desktop-h6jg91b.conf new file mode 100644 index 0000000..966f097 --- /dev/null +++ b/conf/includes/desktop-h6jg91b.conf @@ -0,0 +1,36 @@ +[req] +default_bits = 2048 +default_keyfile = desktop-h6jg91b.key +distinguished_name = req_distinguished_name +req_extensions = req_ext +x509_extensions = v3_ca + +[req_distinguished_name] +countryName = Country Name (2 letter code) +countryName_default = US +stateOrProvinceName = State or Province Name (full name) +stateOrProvinceName_default = Arizona +localityName = Locality Name (eg, city) +localityName_default = Anthem +organizationName = Organization Name (eg, company) +organizationName_default = Phares +organizationalUnitName = organizationalunit +organizationalUnitName_default = Development +commonName = Common Name (e.g. server FQDN or YOUR name) +commonName_default = desktop-h6jg91b +commonName_max = 64 + +[req_ext] +subjectAltName = @alt_names + +[v3_ca] +subjectAltName = @alt_names + +[alt_names] +DNS.1 = desktop-h6jg91b +DNS.2 = localhost +DNS.3 = 127.0.0.1 + +# https://webscoot.io/blog/create-self-signed-certificate-ubuntu-windows-nginx/ +# cd "C:\Program Files\Git\usr\bin" +# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\Git\NGINX-Conf\conf\includes\desktop-h6jg91b.key -out L:\Git\NGINX-Conf\conf\includes\desktop-h6jg91b.crt -config L:\Git\NGINX-Conf\conf\includes\desktop-h6jg91b.conf diff --git a/conf/includes/desktop-h6jg91b.crt b/conf/includes/desktop-h6jg91b.crt new file mode 100644 index 0000000..6c7ea04 --- /dev/null +++ b/conf/includes/desktop-h6jg91b.crt @@ -0,0 +1,23 @@ +-----BEGIN CERTIFICATE----- +MIIDwzCCAqugAwIBAgIUHNUT7UMv/DhFqIN2tHs1atq8/ywwDQYJKoZIhvcNAQEL +BQAwcTELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0FyaXpvbmExDzANBgNVBAcMBkFu +dGhlbTEPMA0GA1UECgwGUGhhcmVzMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEYMBYG +A1UEAwwPZGVza3RvcC1oNmpnOTFiMB4XDTIzMTIyMzIwNTQ0MFoXDTI0MTIyMjIw +NTQ0MFowcTELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0FyaXpvbmExDzANBgNVBAcM +BkFudGhlbTEPMA0GA1UECgwGUGhhcmVzMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEY +MBYGA1UEAwwPZGVza3RvcC1oNmpnOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEA1gLqYJPuJFbjuoEVqW7fCyZTFIJika/OeOXYbVTakN9xfm+EmLEW +RXx8zCNENAsdUIgxdfUVk1RxK513oYrQCpADEWHGvRyLCran7IM/udBacIl6CuFK +tuPd+FQoRZ/77Z71FQU/30xoYfRFk5V3SghBblCa5zzZO87EFwk6v4BWXwPjSfnU +sQLclaivmtYS65Pbcq2YrGG9326AieT5lZb6DqQKBLhHdNzvlFYbapvMNUXSwCuB +QkwV7Yx6fM0P8JGrJ+DJwPBInYDodri0OQUTolMMmWyBekbZPzJBKp7MJkHqj6d4 +KeRC16g6bHhH74TGBzTYb53PvvdYcn6NAwIDAQABo1MwUTAwBgNVHREEKTAngg9k +ZXNrdG9wLWg2amc5MWKCCWxvY2FsaG9zdIIJMTI3LjAuMC4xMB0GA1UdDgQWBBTP +f3CbPpa4/kT5sLe2OICnMC4upzANBgkqhkiG9w0BAQsFAAOCAQEAYNxDqeId7D6i +7Aypgegap99XsWDbSHIiqbZM7dkO00kSWq9MUcq2YlZL837uZX/INEPjxnh2iib0 +tMANt+HpOjWoSd0eUZMWTqIuui6xUrsVsbWiLPR7iDLw9jjYHmQXOt4Wh3AepjBA +FOJC+J8sGP5Zt+UikC3smi/hQGaJraA/BBX7h498a7GgF2Wyk1wMl/rmP9PdWV2T +fCCVkG9Te+jEudESqU8LBtn6L8BCt2fsxBlcX4iLpUyXaWDccgjKjydvLu7nn5Uf +/Fp/U0br5I+VR7NCHcWNDGKc3mxQyw63HTDALg3Vi7pG1JK6/wYdZzdt4EGJF4F+ +cFH7RXkHwg== +-----END CERTIFICATE----- diff --git a/conf/includes/desktop-h6jg91b.key b/conf/includes/desktop-h6jg91b.key new file mode 100644 index 0000000..f15fa81 --- /dev/null +++ b/conf/includes/desktop-h6jg91b.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDWAupgk+4kVuO6 +gRWpbt8LJlMUgmKRr8545dhtVNqQ33F+b4SYsRZFfHzMI0Q0Cx1QiDF19RWTVHEr +nXehitAKkAMRYca9HIsKtqfsgz+50FpwiXoK4Uq24934VChFn/vtnvUVBT/fTGhh +9EWTlXdKCEFuUJrnPNk7zsQXCTq/gFZfA+NJ+dSxAtyVqK+a1hLrk9tyrZisYb3f +boCJ5PmVlvoOpAoEuEd03O+UVhtqm8w1RdLAK4FCTBXtjHp8zQ/wkasn4MnA8Eid +gOh2uLQ5BROiUwyZbIF6Rtk/MkEqnswmQeqPp3gp5ELXqDpseEfvhMYHNNhvnc++ +91hyfo0DAgMBAAECggEAKGkehqQISLZbhAER7Q9xcHKJJ4tDP4056JxGFMb8CnUW +wjAekpKFyRMroYRbQZSDsYw2ArcHnu1H/VtblpZWmFf/LE4RL+5u1tQMu11BMD4G +hc9/ywQljolShaymehcug/0K/DAkkm6kGzL73FVR1Bng+QqhZV6ZCnENl+f3PueN +XHY8CqoMpU9ZtzzxOSwbNowVqSTQmIcrbU7tWhd4dGjByAOvj8VBWfouDnA1CxzJ +ns3JJwHrW9xreijKr+am8JvjWEMyJOXD8I9v5TaICm8pnTQHuf3xZ5+bMJfmA8HT +9sGHWK5Cq2p42isimdZoW9g+q1zJiOcm9FhQbInj+QKBgQD3+gho0diIIrHg4Rzx +nliB1JoF4pugwZqDhFSySyVMc2jTfs34i4AQY5cwhuRvi75DAh5kSnsrv8z4enpA +bNvNqVKkQihRKXf3Dyjc94jRNtzodjNYpKRIpn4/0kW4vX0cKyMnb4nWs58e7Q+D +pnKqwIiGmounvfy7rVMj74/dXwKBgQDc740lGL20v40ZRnploVunK3hu/hgDrktw +TB2+QPdFdBNA9oluo0JUFhooivIgedBCr84AyD+lI1duPYx3/AOR8CMppe6JwoVv ++swhVCZIZT4oZItWk0AYHBAzT5vcu38oDl6UPqMTD27HBOPKl5RpUPto3k4bqWb+ +HB/FxxbO3QKBgQDnjh3+Kz2j2an6UJsjb/Y7vdfZeQJT+ZUcDBy+pHb+zaHsJDOX +TERYiXarhLqZAoe2sKrKgdZEQwTWXh/8OuqBQASAh5p4N13jYM+Kjsa+fhmIJJ/L +vWn+wSGQ3PvoB2FlRU69S2UODIqgaUMcbvgSRFj4QCX6i+kNI0tIejH/xwKBgHls +JlRG/qvBwpgrhcUpIygC2hOWDjinp8o16vrO1ZcULii71dg6XY+8/e9ePaffire7 +yyne5Cur+rcZmIOwu32PTqPrD+giQhfC7EE88DVFfx3P9ExGbSlS8wxgKjbrzPyE +uTIcIp+tEaLLay3ClMw0t5dw5diKB5KMfmHCAyT5AoGBANfahu1+7Gux2d7LiWZx +E9JE8ObR7vXWtV19DAAFAlrhAed3X366+hSzH4TnvsMhSn/r0XeiYjEVgWwsVDju +/pLgSy9f6LFLyiLUuxHUikK05Br+vKSW22o55xP3w8YXi5m1d7UlZRvFsjKYw+A/ +kxgA8Bt0zAWAMiEc2s2N9Xbv +-----END PRIVATE KEY----- diff --git a/conf/nginx.conf b/conf/nginx.conf index 257981d..5f2ff72 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -3,58 +3,36 @@ events { worker_connections 1024; } http { - include "includes/mime.types"; - default_type application/octet-stream; - sendfile on; - keepalive_timeout 65; - server { - listen 5050; - server_name localhost; - include "includes/html.conf"; - error_page 500 502 503 504 /50x.html; - include "includes/html-error.conf"; - } - server { - listen 4430; - server_name iscn5cg1325c0x.infineon.com; - include "includes/BaGet.conf"; - } - server { - listen 5051; - server_name localhost; - include "includes/www.conf"; - } - server { - listen 5052; - server_name localhost; - include "includes/json.conf"; - } - server { - listen 5053; - server_name localhost; - include "includes/ProgramData.conf"; - } - server { - listen 8080; - server_name ~(oi-metrology-viewer-archive).mes.infineon.com; - location / { - include "includes/Archive.conf"; - } - } - server { - listen 8080; - server_name ~(oi-metrology-viewer-prod).mes.infineon.com; - location / { - include "includes/Viewer.conf"; - } - } - server { - listen 8088; - server_name *.mes.infineon.com; - include "includes/EAF-Viewer.Server.conf"; + include "includes/mime.types"; + default_type application/octet-stream; + sendfile on; + keepalive_timeout 65; + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name localhost; + ssl_certificate "includes/desktop-h6jg91b.crt"; + ssl_certificate_key "includes/desktop-h6jg91b.key"; + ssl_protocols TLSv1.2 TLSv1.1 TLSv1; + # include "includes/html.conf"; + include "includes/BaGet.conf"; + error_page 500 502 503 504 /50x.html; + include "includes/html-error.conf"; + } + server { + listen 80; + listen [::]:80; + server_name localhost; + location / { + proxy_pass http://localhost:8080/; + proxy_set_header Host $host; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection upgrade; + proxy_set_header Accept-Encoding gzip; } + } } -# mklink /J "C:\Users\phares\AppData\Local\IFXApps\nginx-1.20.1\conf" "L:\Git\NGINX-Conf\conf" +# mklink /J "C:\Users\mikep\AppData\Local\PharesApps\nginx-1.20.1\conf" "L:\Git\NGINX-Conf\conf" # cd "C:\Users\ECMESEAF\AppData\Local\IFXApps\nginx-1.20.1" # .\nginx -t # .\nginx -s reload