admin/common-server-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0908

Browse Source
This commit is contained in:
张威33321
2026-09-09 15:04:54 +08:00
parent fb87be680d
commit a9ec40a289
22 changed files with 303 additions and 352 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
nginx/ssl.d.available/fastgpt.conf
View File

@@ -1,12 +1,12 @@
# HTTPS 配置 —— fastgpt.stonelan.cn
# 仅在 /etc/letsencrypt/live/fastgpt.stonelan.cn/fullchain.pem 存在时，
# 由 nginx/enable-ssl.sh 复制到 ssl.d/ 才会被 nginx 加载。
# 5 个域名共用一张 SAN 证书，统一放在 /etc/letsencrypt/live/stonelan.cn/。
# 由 nginx/enable-ssl.sh 在证书就绪后复制到 ssl.d/ 才会被 nginx 加载。
server {
listen 8443 ssl;
server_name fastgpt.stonelan.cn;
ssl_certificate /etc/letsencrypt/live/fastgpt.stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/fastgpt.stonelan.cn/privkey.pem;
ssl_certificate /etc/letsencrypt/live/stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/stonelan.cn/privkey.pem;
# SSL 优化配置
ssl_protocols TLSv1.2 TLSv1.3;

7
nginx/ssl.d.available/gitea.conf
View File

@@ -1,12 +1,13 @@
# HTTPS 配置 —— gitea.stonelan.cn
# 仅在证书存在时由 nginx/enable-ssl.sh 复制到 ssl.d/ 才会生效。
# 5 个域名共用一张 SAN 证书，统一放在 /etc/letsencrypt/live/stonelan.cn/。
# 由 nginx/enable-ssl.sh 在证书就绪后复制到 ssl.d/ 才会生效。
server {
listen 8443 ssl;
server_name gitea.stonelan.cn;
client_max_body_size 200m;
ssl_certificate /etc/letsencrypt/live/gitea.stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/gitea.stonelan.cn/privkey.pem;
ssl_certificate /etc/letsencrypt/live/stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/stonelan.cn/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;

7
nginx/ssl.d.available/image.conf
View File

@@ -1,11 +1,12 @@
# HTTPS 配置 —— image.stonelan.cn
# 仅在证书存在时由 nginx/enable-ssl.sh 复制到 ssl.d/ 才会生效。
# 5 个域名共用一张 SAN 证书，统一放在 /etc/letsencrypt/live/stonelan.cn/。
# 由 nginx/enable-ssl.sh 在证书就绪后复制到 ssl.d/ 才会生效。
server {
listen 8443 ssl;
server_name image.stonelan.cn;
ssl_certificate /etc/letsencrypt/live/image.stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/image.stonelan.cn/privkey.pem;
ssl_certificate /etc/letsencrypt/live/stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/stonelan.cn/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;

7
nginx/ssl.d.available/registry.conf
View File

@@ -1,12 +1,13 @@
# HTTPS 配置 —— registry.stonelan.cn
# 仅在证书存在时由 nginx/enable-ssl.sh 复制到 ssl.d/ 才会生效。
# 5 个域名共用一张 SAN 证书，统一放在 /etc/letsencrypt/live/stonelan.cn/。
# 由 nginx/enable-ssl.sh 在证书就绪后复制到 ssl.d/ 才会生效。
server {
listen 8443 ssl;
server_name registry.stonelan.cn;
client_max_body_size 500m;
ssl_certificate /etc/letsencrypt/live/registry.stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/registry.stonelan.cn/privkey.pem;
ssl_certificate /etc/letsencrypt/live/stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/stonelan.cn/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;

7
nginx/ssl.d.available/www.conf
View File

@@ -1,11 +1,12 @@
# HTTPS 配置 —— www.stonelan.cn
# 仅在证书存在时由 nginx/enable-ssl.sh 复制到 ssl.d/ 才会生效。
# 5 个域名共用一张 SAN 证书，统一放在 /etc/letsencrypt/live/stonelan.cn/。
# 由 nginx/enable-ssl.sh 在证书就绪后复制到 ssl.d/ 才会生效。
server {
listen 8443 ssl;
server_name www.stonelan.cn;
ssl_certificate /etc/letsencrypt/live/www.stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.stonelan.cn/privkey.pem;
ssl_certificate /etc/letsencrypt/live/stonelan.cn/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/stonelan.cn/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;