ssl

.gitignore

@@ -1 +1,2 @@
-nginx-1.20.1
+conf/includes/localhost.crt
+conf/includes/localhost.key

conf/includes/BaGet.conf

@@ -1,11 +1,11 @@
-location /
-{
-    proxy_pass         http://localhost:5555;
+location / {
     proxy_http_version 1.1;
-    proxy_set_header   Upgrade $http_upgrade;
-    proxy_set_header   Connection keep-alive;
-    proxy_set_header   Host $http_host;
     proxy_cache_bypass $http_upgrade;
+    proxy_pass http://localhost:5555;
+    proxy_set_header Host $http_host;
+    proxy_set_header Connection keep-alive;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header X-Forwarded-Proto https;
 }
 
 # sc create "Baget-5555" start= delayed-auto DisplayName="Baget-5555" binPath= "C:\Users\phares\AppData\Local\IFXApps\BaGet\src\BaGet\bin\Release\net6.0\win-x64\publish\BaGet.exe" obj= "infineon\phares" password= ""

conf/includes/Gogs.conf

@@ -0,0 +1,8 @@
+location / {
+    proxy_hide_header Authorization;
+    if ($http_Authorization != "Basic asdf") {
+        return 401;
+    }
+    proxy_set_header Authorization "Basic asdf";
+    proxy_pass http://localhost:3000;
+}

conf/includes/code-server.conf

@@ -0,0 +1,25 @@
+server {
+    server_name phares3757.ddns.net;
+    location / {
+        proxy_pass http://localhost:8007/;
+        proxy_set_header Host $host;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection upgrade;
+        proxy_set_header Accept-Encoding gzip;
+    }
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/phares3757.ddns.net/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/phares3757.ddns.net/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+}
+server {
+    if ($host = phares3757.ddns.net) {
+        return 301 https://$host$request_uri;
+        } # managed by Certbot
+    listen 80;
+    listen [::]:80;
+    server_name phares3757.ddns.net;
+    return 404; # managed by Certbot
+}

conf/includes/default.conf

@@ -0,0 +1,8 @@
+server {
+    listen 8008 default_server;
+    listen [::]:8008 default_server;
+    ## Trun on /cgi-bin/ support to run CGI apps ##
+    include /etc/nginx/fcgiwrap.conf;
+    root /var/www/html;
+    server_name _;
+}

conf/includes/desktop-ka0lmmj.crt

@@ -1,23 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDvTCCAqWgAwIBAgIUOsg4aPDaIFSGEvs6RHMXhJbX3jAwDQYJKoZIhvcNAQEL
-BQAwbjELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0FyaXpvbmExDzANBgNVBAcMBkFu
-dGhlbTEPMA0GA1UECgwGUGhhcmVzMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEVMBMG
-A1UEAwwMbWlrZS5kZXNrdG9wMB4XDTI0MDEwMjAyMjA0M1oXDTI1MDEwMTAyMjA0
-M1owbjELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0FyaXpvbmExDzANBgNVBAcMBkFu
-dGhlbTEPMA0GA1UECgwGUGhhcmVzMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEVMBMG
-A1UEAwwMbWlrZS5kZXNrdG9wMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
-AQEApRt53Dn5+U1gfLEbpjlG6YhlE2Q3ZGZMPIpyw3YuR6BDiLgm54h3n7AU0hPs
-QziYRV5LolHlQ6kVxdNA0CIiehmNVEQGmkrVDUO0+CM7vE6DgT2+tQdENJrFk2+J
-RVLIgzdop0RWF+kiT+xMn62muygsZYB2cmoHBr1mPnh6DZthF8H4gp397TTxTxpn
-r5RZNcFdKL2OEkquKf7OsGHKL7fGygq0kyCJ8YuYPC330jsocMto3AEKIzgTRHwp
-km3FojVcS1eguksO9Yjn37ypDAYoARV79T4MzPM+XvWbFnVSMVhFLgTzoY3xH01z
-eqKEVEIwNpHw75Bte9ae0Gi08QIDAQABo1MwUTAwBgNVHREEKTAngg9kZXNrdG9w
-LWthMGxtbWqCCWxvY2FsaG9zdIIJMTI3LjAuMC4xMB0GA1UdDgQWBBQZ6BSgYpeU
-anSU2i3jKLNsowe5LDANBgkqhkiG9w0BAQsFAAOCAQEAmnEelJm3JNb3Ymj7Ti0e
-fko097INlTScZvukU1b+zaecHK7vhiT6Tre+MuZTElFBUq8mwCvtoqZmHmSR7cWg
-B82Etj3r0gcemetZqF4IS2SGbU5p+FsOZj5uZ/9RYSczDUbiUuNiZpZzoj/Stqrq
-fKe0kSarnp2XLLRk8IC1/S16aXn6gvdYMEP4/lWKEzm3te5g8M0HlcEbMfPDDNMS
-AlvlDFI8yAx+enQ9rWsD2K8sMKx8JD2WYTkUk1eR2+JOMNDRERPSxBpLA8ZMnM7j
-I38Pa4cexArOCBVaFKFnf055Tgm/cI0EMBCC8P/dqfcNvsjpfQvm9I6ZMk82d+sd
-EA==
------END CERTIFICATE-----

conf/includes/desktop-ka0lmmj.key

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQClG3ncOfn5TWB8
-sRumOUbpiGUTZDdkZkw8inLDdi5HoEOIuCbniHefsBTSE+xDOJhFXkuiUeVDqRXF
-00DQIiJ6GY1URAaaStUNQ7T4Izu8ToOBPb61B0Q0msWTb4lFUsiDN2inRFYX6SJP
-7Eyfraa7KCxlgHZyagcGvWY+eHoNm2EXwfiCnf3tNPFPGmevlFk1wV0ovY4SSq4p
-/s6wYcovt8bKCrSTIInxi5g8LffSOyhwy2jcAQojOBNEfCmSbcWiNVxLV6C6Sw71
-iOffvKkMBigBFXv1PgzM8z5e9ZsWdVIxWEUuBPOhjfEfTXN6ooRUQjA2kfDvkG17
-1p7QaLTxAgMBAAECggEABvhPF4aMiJNVRYpJ/SVJmrH291+5jWfao8sh72GxsDUi
-KLdCcC+FAkUiCeDMrmVJG1OQ3JI5vBabHFHv2GF6hF5IBrTE9RY/4nqXXQrKuqcz
-Wr0/K9/5x4E5okDZAgfNvmlURgxm2IVPXSGf9fU0Fs5KOoI27dtPPt/3vR8joueZ
-EMur9yjnN91cxfH9jV73jbM5Q7sSCfKEr5MdxzyXtTz55dmZ77EcFWg4EZ/N6ZVB
-JWg3fU+bWk+L7eN1aR6Vd2ds5S+PTPs11CukuwZlPVv2vkNuHWSK84cNXZ6bx5Gs
-2S3GEowo7/Vaj7sEMVg68Yb2WgWyhbFohVV5RHAeyQKBgQDO5MP6iDL1KeFRWomF
-dSA9YrUeRF+XPjmjCaLan/adIzCN34eU28G5sixoQFm3tVwbAvojhZngJxF21Q5M
-mKRbqoDCVtVgkA5p/qWTRUHno0G0Gc5amB0I8oXlWuPZAz7lg6Td8XRxtmy+bi3H
-PbacgfqeWuCeHBJCUirLnphwSQKBgQDMS7MBf5g8UB4SLh6JwgWiD4PA3kxhoZjP
-P/odaotzktgDTG8Ki7PqvqTgoRoknkLcdwCZRcjfqqm6qhTU7gkpAvg5zfk8YQO4
-aysBWxJ7khZGnIIGvh9Cg4FJXLeJozUXKIB/zwU22lfNJG8VYNG9Hg9eOh3V9BT5
-pceTN5tvaQKBgQCiKD9Kj5GRAiAtiU6cIW8BbeoTLPfXLNgz5wuTWykJhFk7+WTk
-0VEHYJTZqQYorKbiLPUs/jvaqgRQJTEt6712cy60IybepkoF3aacxP2gth57MHbC
-HtMy/hLf7tsCbj7P2NxRcDwaHCcjImwS61XDWUS69PN0OQA+pvQP3+AOsQKBgFiN
-S2cP3nXuKEqrEPOXVQe8/9f+w07iU7EpwwkzIIUVFmq/m7YPfgn3XtI7InDS5JpZ
-ProxJHPGrtFJXcQ59WCAeAXeQPUp/AnY8gghaK6FUQCEYFv51uTmyYh6FtgjFSUX
-mjNMEa+IDtzNuRSkJeV6fSDTwhD2Po1DjXFDfi1ZAoGBAJUrphHp5z7IOe6yw0Ui
-PU8fsA33uaNFy5M97MCygNRt/7elizodVKLZfqyoXKJ1YvCkPax8P+T78OWq0sre
-Zv7dL1zKJlUnvw05Pu+/O0gTc/8yBNotuiU5dFIQd/yVEbFlOFGC9mcZBcMBdbkm
-+kjLk2e0xy0iI6NZMLtix6B2
------END PRIVATE KEY-----

conf/includes/dex.conf

@@ -0,0 +1,29 @@
+location ~* .(3gp|apng|avi|avif|bmp|css|cur|flv|gif|htm|html|ico|jfif|jpeg|jpg|js|mid|mov|mp3|mp4|mpeg|mpg|ogg|pdf|php|pjp|pjpeg|png|svg|tif|tiff|txt|wav|webp|wmf|wml|wmv|xml|xml)$ {
+    expires 1d;
+    index index.html index.htm;
+    # ln -s /etc/nginx/sites-available/json /etc/nginx/sites-enabled/
+    # ln -s /srv/samba/share/637998119172547651 /var/www/html/637998119172547651
+    # ln -s /var/www/html/NGINdeX.io /var/www/html/637998119172547651/NGINdeX.io
+    # ln -s /srv/git /var/www/html/637998119172547651/git
+    # root /var/www/html/637998119172547651;
+    # mklink /J "D:\Tmp\Phares\www\pictures" "D:\Documents\Pictures"
+    # mklink /J "D:\Tmp\Phares\www\NGINdeX.io" "L:\GitHub\NGINdeX.io"
+    root "D://Tmp//phares//www";
+}
+location / {
+    index index.html index.htm;
+    # root /var/www/html/637998119172547651;
+    # mklink /J "D:\Tmp\Phares\www\pictures" "D:\Documents\Pictures"
+    # mklink /J "D:\Tmp\Phares\www\NGINdeX.io" "L:\GitHub\NGINdeX.io"
+    root "D://Tmp//phares//www";
+    # First attempt to serve request as file, then
+    autoindex on;
+    # Send the data in JSON
+    autoindex_format json;
+    addition_types application/json;
+    # Calling from SERVERNAME/autoindex/*
+    add_before_body /NGINdeX.io/header.html;
+    add_after_body /NGINdeX.io/footer.html;
+    # Need to tell that we are sending HTML
+    add_header Content-Type text/html;
+}

conf/includes/json.conf

@@ -1,24 +1,29 @@
-# location ~ /admin(.*)/$ {
 location ~* .(3gp|apng|avi|avif|bmp|css|cur|flv|gif|htm|html|ico|jfif|jpeg|jpg|js|mid|mov|mp3|mp4|mpeg|mpg|ogg|pdf|php|pjp|pjpeg|png|svg|tif|tiff|txt|wav|webp|wmf|wml|wmv|xml|xml)$ {
     expires 1d;
     index index.html index.htm;
+    # ln -s /etc/nginx/sites-available/json /etc/nginx/sites-enabled/
+    # ln -s /srv/samba/share/637998119172547651 /var/www/html/637998119172547651
+    # ln -s /var/www/html/NGINdeX.io /var/www/html/637998119172547651/NGINdeX.io
+    # ln -s /srv/git /var/www/html/637998119172547651/git
+    # root /var/www/html/637998119172547651;
     # mklink /J "D:\Tmp\Phares\www\pictures" "D:\Documents\Pictures"
     # mklink /J "D:\Tmp\Phares\www\NGINdeX.io" "L:\GitHub\NGINdeX.io"
     root "D://Tmp//phares//www";
 }
 location / {
     index index.html index.htm;
+    # root /var/www/html/637998119172547651;
     # mklink /J "D:\Tmp\Phares\www\pictures" "D:\Documents\Pictures"
     # mklink /J "D:\Tmp\Phares\www\NGINdeX.io" "L:\GitHub\NGINdeX.io"
-    root "D://Tmp//phares//www";
+    root "C://4p_W7a";
     # First attempt to serve request as file, then
     autoindex on;
     # Send the data in JSON
     autoindex_format json;
-    addition_types application/json;
+    # addition_types application/json;
     # Calling from SERVERNAME/autoindex/*
-    add_before_body /NGINdeX.io/header.html;
-    add_after_body /NGINdeX.io/footer.html;
+    # add_before_body /NGINdeX.io/header.html;
+    # add_after_body /NGINdeX.io/footer.html;
     # Need to tell that we are sending HTML
-    add_header Content-Type text/html;
+    # add_header Content-Type text/html;
 }

conf/includes/localhost.conf

@@ -1,6 +1,6 @@
 [req]
 default_bits       = 2048
-default_keyfile    = desktop-ka0lmmj.key
+default_keyfile    = localhost.key
 distinguished_name = req_distinguished_name
 req_extensions     = req_ext
 x509_extensions    = v3_ca
@@ -11,13 +11,13 @@ countryName_default         = US
 stateOrProvinceName         = State or Province Name (full name)
 stateOrProvinceName_default = Arizona
 localityName                = Locality Name (eg, city)
-localityName_default        = Anthem
+localityName_default        = Mesa
 organizationName            = Organization Name (eg, company)
-organizationName_default    = Phares
+organizationName_default    = Infineon Technologies Americas Corp.
 organizationalUnitName      = organizationalunit
 organizationalUnitName_default = Development
 commonName                  = Common Name (e.g. server FQDN or YOUR name)
-commonName_default          = mike.desktop
+commonName_default          = example.com
 commonName_max              = 64
 
 [req_ext]
@@ -27,11 +27,11 @@ subjectAltName = @alt_names
 subjectAltName = @alt_names
 
 [alt_names]
-DNS.1   = chelsea.desktop
-DNS.1   = desktop-ka0lmmj
+DNS.1   = example.com
 DNS.2   = localhost
 DNS.3   = 127.0.0.1
 
 # https://webscoot.io/blog/create-self-signed-certificate-ubuntu-windows-nginx/
 # cd "C:\Program Files\Git\usr\bin"
-# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.key -out L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.crt -config L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.conf
+# openssl
+# req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\Git\NGINX-Conf\conf\includes\localhost.key -out L:\Git\NGINX-Conf\conf\includes\localhost.crt -config L:\Git\NGINX-Conf\conf\includes\localhost.conf

conf/nginx.conf

@@ -8,15 +8,51 @@ http {
     sendfile on;
     keepalive_timeout 65;
     server {
-      listen 443 ssl http2;
-      listen [::]:443 ssl http2;
+        listen 5051;
         server_name localhost;
-      ssl_certificate "includes/desktop-ka0lmmj.crt";
-      ssl_certificate_key "includes/desktop-ka0lmmj.key";
-      ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-      # include "includes/html.conf";
-      location / { proxy_pass http://localhost:8384; }
-      error_page 500 502 503 504 /50x.html;
-      include "includes/html-error.conf";
+        include "includes/www.conf";
+    }
+    server {
+        listen 5052;
+        server_name localhost;
+        include "includes/dex.conf";
+    }
+    server {
+        listen 5053;
+        server_name localhost;
+        include "includes/ProgramData.conf";
+    }
+    server {
+        listen 80;
+        server_name localhost;
+        include "includes/json.conf";
+    }
+    server {
+        listen 8011;
+        server_name localhost;
+        include "includes/Gogs.conf";
+    }
+    server {
+        listen 8080;
+        server_name ~(oi-metrology-viewer-archive).mes.infineon.com;
+        location / {
+            include "includes/Archive.conf";
         }
     }
+    server {
+        listen 8080;
+        server_name ~(oi-metrology-viewer-prod).mes.infineon.com;
+        location / {
+            include "includes/Viewer.conf";
+        }
+    }
+    server {
+        listen 8088;
+        server_name *.mes.infineon.com;
+        include "includes/EAF-Viewer.Server.conf";
+    }
+}
+# mklink /J "C:\Users\mikep\AppData\Local\PharesApps\nginx-1.20.1\conf" "L:\Git\NGINX-Conf\conf"
+# cd "C:\Users\ECMESEAF\AppData\Local\IFXApps\nginx-1.20.1"
+# .\nginx -t
+# .\nginx -s reload