diff --git a/config/nginx.conf b/config/nginx.conf index 61e7af3..a6ce74f 100644 --- a/config/nginx.conf +++ b/config/nginx.conf @@ -1,10 +1,11 @@ + upstream payreagri_app_unicorn { server unix:/srv/www/web/payreagri_app/shared/tmp/unicorn.sock fail_timeout=0; } server { - listen [::]:80; - server_name payreagri.quartz.xyz ; + listen [::]:443 ssl; + server_name payreagriculture.fr; root /srv/www/web/payreagri_app/current/public; try_files $uri/index.html $uri @unicorn; @@ -19,13 +20,35 @@ server { error_page 500 502 503 504 /500.html; client_max_body_size 4G; keepalive_timeout 10; + + ssl on; + ssl_certificate /etc/letsencrypt/live/payreagriculture.fr/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/payreagriculture.fr/privkey.pem; + + + include snippets/letsencrypt.conf; } server { listen [::]:80; - server_name www.payreagri.quartz.xyz; - rewrite ^(.*) http://payreagri.quartz.xyz$1 permanent; + server_name payreagri.quartz.xyz payreagriculture.fr *.payreagriculture.fr groupepayre.fr *.groupepayre.fr; + + return 301 https://payreagriculture.fr$request_uri; + + include snippets/letsencrypt.conf; +} + +server { + listen [::]:443 ssl; + server_name www.payreagriculture.fr; + ssl on; + ssl_certificate /etc/letsencrypt/live/payreagriculture.fr/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/payreagriculture.fr/privkey.pem; + + return 301 https://payreagriculture.fr$request_uri; + + include snippets/letsencrypt.conf; }