using https with self-signed cert

This commit is contained in:
Devaev Maxim
2018-08-09 04:06:44 +03:00
parent f71788bb35
commit e3f5d1e4d6
4 changed files with 38 additions and 22 deletions

View File

@@ -10,13 +10,26 @@ events {
}
http {
access_log off;
include mime.types;
default_type application/octet-stream;
charset utf-8;
sendfile on;
keepalive_timeout 10;
# gzip on;
client_body_temp_path /tmp/nginx.client_body_temp;
fastcgi_temp_path /tmp/nginx.fastcgi_temp;
proxy_temp_path /tmp/nginx.proxy_temp;
scgi_temp_path /tmp/nginx.scgi_temp;
uwsgi_temp_path /tmp/nginx.uwsgi_temp;
server {
listen 80;
server_name localhost;
return 301 https://$host$request_uri;
}
upstream kvmd {
server localhost:8081 fail_timeout=0s max_fails=0;
@@ -27,17 +40,15 @@ http {
}
server {
# access_log /tmp/nginx.access.log;
access_log off;
listen 80;
listen 443 ssl http2;
server_name localhost;
client_body_temp_path /tmp/nginx.client_body_temp;
fastcgi_temp_path /tmp/nginx.fastcgi_temp;
proxy_temp_path /tmp/nginx.proxy_temp;
scgi_temp_path /tmp/nginx.scgi_temp;
uwsgi_temp_path /tmp/nginx.uwsgi_temp;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_certificate ssl/server.crt;
ssl_certificate_key ssl/server.key;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
location / {
root /usr/share/kvmd/web;

View File

@@ -10,13 +10,20 @@ events {
}
http {
access_log off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
charset utf-8;
sendfile on;
keepalive_timeout 10;
# gzip on;
client_body_temp_path /tmp/nginx.client_body_temp;
fastcgi_temp_path /tmp/nginx.fastcgi_temp;
proxy_temp_path /tmp/nginx.proxy_temp;
scgi_temp_path /tmp/nginx.scgi_temp;
uwsgi_temp_path /tmp/nginx.uwsgi_temp;
upstream kvmd {
server localhost:8081 fail_timeout=0s max_fails=0;
@@ -27,18 +34,9 @@ http {
}
server {
# access_log /tmp/nginx.access.log;
access_log off;
listen 8080;
server_name localhost;
client_body_temp_path /tmp/nginx.client_body_temp;
fastcgi_temp_path /tmp/nginx.fastcgi_temp;
proxy_temp_path /tmp/nginx.proxy_temp;
scgi_temp_path /tmp/nginx.scgi_temp;
uwsgi_temp_path /tmp/nginx.uwsgi_temp;
location / {
root /web;
index index.html;

View File

@@ -20,7 +20,7 @@ var session = new function() {
};
this.startPoller = function() {
__ws = new WebSocket("ws://" + location.host + "/kvmd/ws");
__ws = new WebSocket((location.protocol == "https:" ? "wss" : "ws") + "://" + location.host + "/kvmd/ws");
__ws.onopen = __wsOpenHandler;
__ws.onmessage = __wsMessageHandler;
__ws.onerror = __wsErrorHandler;