safebox/proxy-scheduler
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Minor fixes.

Browse Source
This commit is contained in:
Gyorgy Berenyi
2021-06-30 09:03:17 +00:00
parent cf8ca904f5
commit 379a765df3
2 changed files with 20 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
scripts/check_certificates.sh
View File

@@ -4,13 +4,20 @@
DOMAIN_DIR=$DOMAIN_DIR DOMAIN_DIR=$DOMAIN_DIR
CERT_DIR=$CERT_DIR CERT_DIR=$CERT_DIR
DOMAIN=$1
create_self_signed_certificate() {
# generate key
openssl req -x509 -newkey rsa:4096 -keyout $CERT_DIR/key.pem -out $CERT_DIR/cert.pem -days 365 -sha256 -nodes -subj '/CN=domain.tld'
# generate dhparam file # generate dhparam file
openssl dhparam -out $CERT_DIR/dhparam.pem 4096 openssl dhparam -out $CERT_DIR/dhparam.pem 4096
create_self_signed_certificate() {
# generate key
openssl req -x509 -newkey rsa:4096 -keyout $CERT_DIR/key.pem -out $CERT_DIR/cert.pem -days 365 -sha256 -nodes -subj '/CN=$DOMAIN'
} }
if [[ "$(ls -A $CERT_DIR)" == "" ]]; then
echo "$DOMAIN not contains certificates, creates new."
create_self_signed_certificate;
fi

20
scripts/nginx_config_create.sh
View File

@@ -2,10 +2,13 @@
JQ="jq -r" JQ="jq -r"
cd /proxy_config
DOMAIN=$1 DOMAIN=$1
DEL=$2 DEL=$2
if [[ "$DEL" != "" ]]; then if [[ "$DEL" != "" ]]; then
echo "$DOMAIN DELETED"; echo "$DOMAIN DELETED";
rm $DOMAIN.conf;
exit; exit;
fi fi
@@ -21,11 +24,15 @@ REDIRECT_HTTP=$(jq -r .REDIRECT_HTTP $DOMAIN_SOURCE)
REDIRECT_HTTPS=$(jq -r .REDIRECT_HTTPS $DOMAIN_SOURCE) REDIRECT_HTTPS=$(jq -r .REDIRECT_HTTPS $DOMAIN_SOURCE)
ERROR_PAGE=$(jq -r .ERROR_PAGE $DOMAIN_SOURCE) ERROR_PAGE=$(jq -r .ERROR_PAGE $DOMAIN_SOURCE)
# check whether certificates exist or not
if [ $HTTPS_PORT != "" ]; then
./check_certificates.sh "$DOMAIN";
fi
echo $DOMAIN; echo $DOMAIN;
exit; exit;
cd /proxy_config
file="$DOMAIN.conf" file="$DOMAIN.conf"
cp -a nginx_template.conf $DOMAIN.conf cp -a nginx_template.conf $DOMAIN.conf
@@ -79,7 +86,7 @@ listen $HTTPS_PORT ssl;
server_name $DOMAIN_NAME; server_name $DOMAIN_NAME;
rewrite_log on rewrite_log on
proxy_ssl_server_name on; proxy_ssl_server_name on;
ssl_dhparam /etc/ssl/keys/dhparams.pem; ssl_dhparam /etc/ssl/keys/dhparam.pem;
ssl_certificate /etc/ssl/keys/fullchain.pem; ssl_certificate /etc/ssl/keys/fullchain.pem;
ssl_certificate_key /etc/ssl/keys/key.pem; ssl_certificate_key /etc/ssl/keys/key.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
@@ -119,10 +126,3 @@ echo "location / {
} >> "$file" } >> "$file"
# check whether certificates exist or not
if [ $HTTPS_PORT != "" ]; then
./check_certificates.sh;
fi