smail
0c4ad939aa
Some checks are pending
Security Checks / security (push) Waiting to run
补充部署时的历史运行数据保护，移除前端旧域名兜底，并将 Nginx 模板改为用户确认域名占位符。
68 lines
1.9 KiB
Plaintext
68 lines
1.9 KiB
Plaintext
# 部署前必须将域名占位符替换为用户在初始化页面确认的邮件主域名和后台域名。
|
|
# 此模板不包含测试域名；不要将未填写的模板直接安装到 Nginx。
|
|
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
server_name _;
|
|
return 404;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name __SMAIL_MAIL_DOMAIN__ __SMAIL_WEB_DOMAIN__;
|
|
|
|
location ^~ /.well-known/acme-challenge/ {
|
|
root /var/lib/smail-acme;
|
|
default_type text/plain;
|
|
try_files $uri =404;
|
|
}
|
|
|
|
location / {
|
|
return 308 https://__SMAIL_WEB_DOMAIN__$request_uri;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl default_server;
|
|
listen [::]:443 ssl default_server;
|
|
server_name _;
|
|
ssl_reject_handshake on;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
server_name __SMAIL_MAIL_DOMAIN__;
|
|
ssl_certificate /opt/smail/ssl/custom.crt;
|
|
ssl_certificate_key /opt/smail/ssl/custom.key;
|
|
return 308 https://__SMAIL_WEB_DOMAIN__$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
server_name __SMAIL_WEB_DOMAIN__;
|
|
ssl_certificate /opt/smail/ssl/custom.crt;
|
|
ssl_certificate_key /opt/smail/ssl/custom.key;
|
|
|
|
location / {
|
|
proxy_pass https://127.0.0.1:8002;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $remote_addr;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header Connection "";
|
|
proxy_ssl_server_name on;
|
|
proxy_ssl_name __SMAIL_WEB_DOMAIN__;
|
|
proxy_ssl_verify on;
|
|
proxy_ssl_verify_depth 3;
|
|
proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
|
|
proxy_connect_timeout 5s;
|
|
proxy_read_timeout 90s;
|
|
proxy_send_timeout 90s;
|
|
}
|
|
}
|