diff --git a/infra/nginx/default.conf b/infra/nginx/default.conf index 1ec28b93..fd39d733 100644 --- a/infra/nginx/default.conf +++ b/infra/nginx/default.conf @@ -1,8 +1,14 @@ server { listen 80; - server_name kikikan.jp; + listen 443 ssl; + server_name kikikan.xyz; root /work/public; + ssl_certificate /usr/bin/certbot/server.crt; + ssl_certificate_key /usr/bin/certbot/server.key; + access_log /var/log/nginx/ssl-access.log; + error_log /var/log/nginx/ssl-error.log; + add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Content-Type-Options "nosniff"; @@ -22,6 +28,7 @@ server { error_page 404 /index.php; location ~ \.php$ { + try_files $uri =404; fastcgi_pass app:9000; fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name; include fastcgi_params;