ops/nginx-kit
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
nginx-kit/README.md
dallaslu 8c0e6e29a1
update
2026-06-05 12:54:22 +08:00

1,012 B
Raw Blame History

Nginx Kit

Start

git clone https://git.forge.st/ops/nginx-kit.git /opt/nginx-kit
ln -s /opt/nginx-kit /etc/nginx/kit

Update

cd /opt/nginx-kit
git pull
nginx -t
systemctl reload nginx

Usage

In server block:

server {
	# ...
	include snippets/cert/mydomain.com.conf;
	include	kit/ssl/security.conf;
	include	kit/ssl/hsts.conf;
	include	kit/ssl/force.conf;
	# ...
}

Tamplates

SSL Certs

cd /etc/nginx
mkdir snippets/cert
cp kit/templates/cert/example.com.conf snippets/cert/mydomain.com.conf
vi snippets/cert/mydomain.com.conf

Replace the path with yours, then include in your server block:

server {
	# ...
	include snippets/cert/mydomain.com.conf;
	include kit/ssl/security.conf;
	include kit/ssl/hsts.conf;
	# ...
}

SSL snippets

  • kit/ssl/security.conf: TLS protocol and session resumption settings.
  • kit/ssl/hsts.conf: HSTS header for HTTPS responses.
  • kit/ssl/force.conf: Redirect HTTP requests to HTTPS.