This is a config template for a nginx reverse proxy with SSL termination.
- You'll need a
nginx.conf
which willinclude conf.d/*.conf;
in thehttp
section.
Otherwise, you'll need to figure out what's the best way for you to include the configuration. - SSL certificate files
server.pem
andserver-key.pem
in directorycerts/
. extra/dhparam.pem
, which you'll have to generate viaopenssl dhparam -out extra/dhparam.pem 4096
(this can happen anywhere, whereopenssl
is available, i.e. this does not have to happen on the server itself).
- Domain name of the proxy server:
server_name
in vhost.conf. - Host of the server without SSL behind this proxy:
proxy_pass
in vhost.conf. - If you're not using docker, you need to adjust the IP of the DNS:
resolver
in ssl.conf.