[Nginx] Création d’un vhost pour Openfire

Création d’un vhost pour Openfire

Os version: Centos 6.8

Une fois Nginx installé, créer le vhost.

$ sudo vim /etc/nginx/sites-available/nomdemachine.domaine.tld.conf

Voici le contenu.

server {
    listen       80;
    server_name nom.domaine.tld nom;
   if ($scheme = http) {
        return 301 https://$server_name$request_uri;
   }
}
server {
    listen       443 ssl;

    server_name  nom.domaine.tld nom;
ssl_certificate /etc/nginx/ssl/nom.domaine.tld.crt; (.pem si letsencrypt)
ssl_certificate_key     /etc/nginx/ssl/nom.domaine.tld.key; (.pem si letsencrypt)

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;

ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-G
CM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA25
6:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-
AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RS
A-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-
RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES1
28-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-
SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!
RC4";



    location / {
        proxy_pass https://nom.domaine.tld:7443/ofmeet;
    }
}