diff --git a/nginx.conf b/nginx.conf new file mode 100644 index 0000000..5f592ec --- /dev/null +++ b/nginx.conf @@ -0,0 +1,88 @@ +# -*-nginx-*- +user www-data; +worker_processes 1; + +#error_log logs/error.log; +#error_log logs/error.log notice; +#error_log logs/error.log info; + +#pid logs/nginx.pid; + + +events { + worker_connections 1024; +} + + +http { + include mime.types; + default_type application/octet-stream; + + #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + # '$status $body_bytes_sent "$http_referer" ' + # '"$http_user_agent" "$http_x_forwarded_for"'; + + #access_log logs/access.log main; + + sendfile on; + #tcp_nopush on; + + #keepalive_timeout 0; + keepalive_timeout 65; + + #gzip on; + + # another virtual host using mix of IP-, name-, and port-based configuration + # + #server { + # listen 8000; + # listen somename:8080; + # server_name somename alias another.alias; + # location / { + # root html; + # index index.html index.htm; + # } + #} + + + # HTTPS server + # + #server { + # listen 443 ssl; + # server_name localhost; + + # ssl_certificate cert.pem; + # ssl_certificate_key cert.key; + + # ssl_session_cache shared:SSL:1m; + # ssl_session_timeout 5m; + + # ssl_ciphers HIGH:!aNULL:!MD5; + # ssl_prefer_server_ciphers on; + + # location / { + # root html; + # index index.html index.htm; + # } + #} + + include /usr/local/nginx/conf/nginx_ldap.conf; + include /usr/local/nginx/conf/sites-enabled/*.conf; + include /usr/local/nginx/conf/sites-enabled/triton.fet.at/*.conf; + include /usr/local/nginx/conf/sites-enabled/fet.at/*.conf; + include /usr/local/nginx/conf/sites-enabled/fachschaften.at/*.conf; + + server { + listen 80 default_server; + server_name "";# 128.131.95.208; + return 503; + } + server { + listen 443 default_server; + server_name "";# 128.131.95.208; + ssl_certificate /etc/letsencrypt/live/triton.fet.at/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/triton.fet.at/privkey.pem; + return 503;# http://$host$request_uri; #444 + } + +} diff --git a/nginx_ldap.conf b/nginx_ldap.conf new file mode 100644 index 0000000..0f4e1ca --- /dev/null +++ b/nginx_ldap.conf @@ -0,0 +1,9 @@ +# -*-nginx-*- +auth_ldap_cache_enabled on; + +ldap_server fet { + url ldap://192.168.86.18:389/ou=user,dc=fet,dc=htu,dc=tuwien,dc=ac,dc=at?uid?sub?(objectClass=person); # gagarin + binddn 'uid=pschlechter,ou=user,dc=fet,dc=htu,dc=tuwien,dc=ac,dc=at'; + binddn_passwd '4vDB_JcaE7kR'; + require valid_user; +}