| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556 |
- # Upstream sites for proxy-ing
- upstream wp {
- server <YOUR_DOCKER_CONTAINER_NAME>;
- }
-
- ### Redirect regular traffic to SSL
- server {
- listen 80 default_server;
- listen [::]:80 default_server;
-
- server_name <CHANGE_ME> www.<CHANGE_ME>;
-
- location / {
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
-
- proxy_pass http://wp;
- proxy_redirect off;
- }
- }
-
- ### SSL Stuff
- server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
-
- server_name <CHANGE_ME> www.<CHANGE_ME>;
-
- include snippets/letsencrypt.conf;
- include snippets/ssl-params.conf;
-
- location / {
- #blocks blank user_agents
- if ($http_user_agent = "") { return 301 $scheme://www.google.com/; }
-
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header Accept-Encoding "";
- proxy_set_header Proxy "";
-
- proxy_pass http://wp;
- proxy_redirect off;
-
- proxy_connect_timeout 300;
- proxy_send_timeout 300;
- proxy_read_timeout 300;
- }
-
- location ~/\.ht {
- deny all;
- }
- }
|