parent
9a8a272fcb
commit
b87661c846
|
@ -8,6 +8,10 @@ Online nginx configuration generator.
|
|||
* [SSL profiles](https://mozilla.github.io/server-side-tls/ssl-config-generator/)
|
||||
* [HSTS](https://hstspreload.org)
|
||||
* force HTTPS
|
||||
* OCSP DNS resolvers
|
||||
* Cloudflare Resolver
|
||||
* Google Public DNS
|
||||
* OpenDNS
|
||||
* CDN
|
||||
* www / non-www
|
||||
* redirect subdomains
|
||||
|
|
|
@ -51,6 +51,10 @@
|
|||
ssl_certificate: '',
|
||||
ssl_certificate_key:'',
|
||||
|
||||
resolver_cloudflare:true,
|
||||
resolver_google: true,
|
||||
resolver_opendns: true,
|
||||
|
||||
non_www: true,
|
||||
cdn: false,
|
||||
|
||||
|
@ -394,6 +398,18 @@
|
|||
return $scope.isHTTPS() && $scope.data.hsts;
|
||||
};
|
||||
|
||||
$scope.isResolverCloudflare = function() {
|
||||
return $scope.isHTTPS() && $scope.data.resolver_cloudflare;
|
||||
};
|
||||
|
||||
$scope.isResolverGoogle = function() {
|
||||
return $scope.isHTTPS() && $scope.data.resolver_google;
|
||||
};
|
||||
|
||||
$scope.isResolverOpenDNS = function() {
|
||||
return $scope.isHTTPS() && $scope.data.resolver_opendns;
|
||||
};
|
||||
|
||||
$scope.isNonWWW = function() {
|
||||
return $scope.data.non_www;
|
||||
};
|
||||
|
|
|
@ -294,6 +294,25 @@
|
|||
placeholder="{{ '/etc/nginx/ssl/' + domain() + '.key' }}">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group row" ng-if="isHTTPS()">
|
||||
<label class="col-sm-3 col-form-label col-form-label-sm">
|
||||
<span tooltips tooltip-template="DNS resolver for stapling">OCSP DNS resolvers</span>
|
||||
</label>
|
||||
<div class="col-sm-9">
|
||||
<div class="form-check" ng-class="{ 'input-changed': data.resolver_cloudflare !== defaultData.resolver_cloudflare }">
|
||||
<input class="form-check-input" type="checkbox" id="resolver_cloudflare" ng-model="data.resolver_cloudflare">
|
||||
<label class="form-check-label" for="resolver_cloudflare">Cloudflare Resolver (<code>1.1.1.1, 1.0.0.1</code>)</label>
|
||||
</div>
|
||||
<div class="form-check" ng-class="{ 'input-changed': data.resolver_google !== defaultData.resolver_google }">
|
||||
<input class="form-check-input" type="checkbox" id="resolver_google" ng-model="data.resolver_google">
|
||||
<label class="form-check-label" for="resolver_google">Google Public DNS (<code>8.8.8.8, 8.8.4.4</code>)</label>
|
||||
</div>
|
||||
<div class="form-check" ng-class="{ 'input-changed': data.resolver_opendns !== defaultData.resolver_opendns }">
|
||||
<input class="form-check-input" type="checkbox" id="resolver_opendns" ng-model="data.resolver_opendns">
|
||||
<label class="form-check-label" for="resolver_opendns">OpenDNS (<code>208.67.222.222, 208.67.220.220</code>)</label>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="tab-pane tab-security" ng-class="{ 'active': tab === 'security' }">
|
||||
<div class="form-group row">
|
||||
|
|
|
@ -55,9 +55,15 @@ http {
|
|||
|
||||
# OCSP Stapling
|
||||
ssl_stapling on;
|
||||
ssl_stapling_verify on;
|
||||
resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=60s;
|
||||
resolver_timeout 2s;</span>
|
||||
ssl_stapling_verify on;<!--
|
||||
|
||||
✔ Resolver: CloudFlare || Google || OpenDNS --><span ng-if="isResolverCloudflare() || isResolverGoogle() || isResolverOpenDNS()">
|
||||
resolver {{
|
||||
(isResolverCloudflare() ? '1.1.1.1 1.0.0.1 ' : '') +
|
||||
(isResolverGoogle() ? '8.8.8.8 8.8.4.4 ' : '') +
|
||||
(isResolverOpenDNS() ? '208.67.222.222 208.67.220.220 ' : '')
|
||||
}}valid=60s;
|
||||
resolver_timeout 2s;</span></span>
|
||||
|
||||
# load configs
|
||||
include /etc/nginx/conf.d/*.conf;<span ng-if="data.file_structure === 'modularized'">
|
||||
|
|
Loading…
Reference in New Issue