aljaz/bitcoin-tutorials
1
1
Fork 0
mirror of https://github.com/openoms/bitcoin-tutorials.git synced 2025-12-18 12:34:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

add nginx scripts

Browse Source
This commit is contained in:
openoms
2022-03-30 09:32:39 +01:00
parent 1b5bd33816
commit e7addd5afa
5 changed files with 77 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
BTCPayServer/bonus.btcpaysetdomain.sh
View File

@@ -240,5 +240,5 @@ if [ $1 = revert ];then
# test
sudo nginx -t
# reload
sudo systemctl reload nginx
sudo systemctl restart nginx
fi

12
nginx/custom_website_subdomain.sh
View File

@@ -22,8 +22,8 @@ sudo certbot certonly -a standalone -m $EMAIL --agree-tos \
--post-hook "service nginx start" || exit 1
# copy in place on a remote machine if needed
#sudo cat /etc/letsencrypt/live/$SUBDOMAIN/fullchain.pem
#sudo cat /etc/letsencrypt/live/$SUBDOMAIN/privkey.pem
#sudo cat /etc/letsencrypt/live/$SUBDOMAIN/fullchain.pem
#sudo cat /etc/letsencrypt/live/$SUBDOMAIN/privkey.pem
# add to /etc/nginx/sites-available/
echo "\
@@ -48,9 +48,9 @@ server {
# from https://github.com/rootzoll/raspiblitz/blob/v1.7/home.admin/assets/nginx/snippets/ssl-proxy-params.conf
proxy_redirect off;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host \$http_host;
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}" | sudo tee /etc/nginx/sites-available/$SUBDOMAIN
@@ -63,4 +63,4 @@ sudo ln -s /etc/nginx/sites-available/$SUBDOMAIN /etc/nginx/sites-enabled/
sudo nginx -t || exit 1
sudo systemctl reload nginx
sudo systemctl restart nginx

2
nginx/electrum_server_subdomain.sh
View File

@@ -78,4 +78,4 @@ stream {
sudo nginx -t || exit 1
# restart
sudo systemctl reload nginx
sudo systemctl restart nginx

68
nginx/https_redirect_to_subdomain.sh Normal file
View File

@@ -0,0 +1,68 @@
#!/bin/bash
echo "
Input your email:
"
read EMAIL
echo "
Input a subdomain set up with an A record pointing to this server:
eg.: tips.diynodes.com
"
read SUBDOMAIN
echo "
Input the URL where the subdomain should be redirected to:
eg.: https://pay.diynodes.com/apps/otJAn2YiMRKeHnKrsZYQF8VuCJD/pos
"
read SERVER
echo "
Input the host address where the site is served:
eg.: https://192.168.1.42:23001
"
read SERVER
sudo certbot certonly -a standalone -m $EMAIL --agree-tos \
-d $SUBDOMAIN --expand -n --pre-hook "service nginx stop" \
--post-hook "service nginx start" || exit 1
echo "\
server {
listen 443 ssl;
server_name SUBDOMAIN;
return 301 $REDIRECT;
ssl on;
ssl_certificate /etc/letsencrypt/live/tips.diynodes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/tips.diynodes.com/privkey.pem;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';
ssl_prefer_server_ciphers on;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/tips.diynodes.com/chain.pem;
location / {
proxy_set_header Host \$host;
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
proxy_pass $SERVER;
}
}
" | sudo tee /etc/nginx/sites-available/$SUBDOMAIN
# edit with
# sudo nano /etc/nginx/sites-available/$SUBDOMAIN
# add to /etc/nginx/sites-enabled/
sudo ln -s /etc/nginx/sites-available/$SUBDOMAIN /etc/nginx/sites-enabled/
sudo nginx -t || exit 1
sudo systemctl restart nginx

2
nginx/mempool_subdomain.sh
View File

@@ -85,4 +85,4 @@ sudo ln -s /etc/nginx/sites-available/$SUBDOMAIN /etc/nginx/sites-enabled/
sudo nginx -t || exit 1
sudo systemctl reload nginx
sudo systemctl restart nginx