https 접속 허용

2026-06-15 13:02:41 +09:00
parent 6481a432fd
commit 8922895ab7
13 changed files with 306 additions and 151 deletions
@@ -0,0 +1,22 @@
+# SSL 인증서가 /etc/nginx/ssl/ 에 있을 때 entrypoint 가 conf.d 에 복사한다.
+server {
+    listen       443 ssl;
+    http2        on;
+    server_name  _;
+    root         /usr/share/nginx/html;
+    index        index.html;
+
+    ssl_certificate     /etc/nginx/ssl/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+    ssl_protocols       TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers off;
+    ssl_session_cache   shared:SSL:10m;
+    ssl_session_timeout 1d;
+
+    client_max_body_size 32m;
+
+    resolver 127.0.0.11 8.8.8.8 8.8.4.4 valid=30s;
+    resolver_timeout 5s;
+
+    include /etc/nginx/gc-locations.inc;
+}