Beiträge von luxflow

luxflow · 28. Juli 2016

yes I'm on 3.0.29 and tested it works also
for master branch?, I didn't test it
IMHO, it will also works in master branch since there are no big difference in commit log

luxflow · 28. Juli 2016

I adapt omv-letsencrypt to OMV 3.0.26
I made a pull requests
before accepted, anyone who interested can test my omv-letsencrpyt which is adapted to 3.0.26

https://github.com/luxflow/openmediavault-letsencrypt

How to use?
Enable `OMV-extras testing repo`
install openmediavault-letsencrypt 3.X
enjoy

#HOW CAN I USES MULTIPLE SUBDOMAINS?
change example domain according your domain (*.example.org)
1. add OMV_NGINX_SITE_WEBGUI_SERVERNAME,
this will be your omv admin domain

vim /etc/default/openmediavault
OMV_NGINX_SITE_WEBGUI_SERVERNAME="omv.example.org"

2. add file to /etc/nginx and /etc/nginx/site-enabled
below is example file for subdomain irc

/etc/nginx/http

Code

listen [::]:80;
location /.well-known/ {
    root        /var/www/openmediavault;
}
location  / {
return 301 https://$server_name$request_uri;
}

/etc/nginx/https

Code

listen [::]:443 ssl;


ssl_certificate  /etc/letsencrypt/live/example.org/fullchain.pem;
ssl_certificate_key  /etc/letsencrypt/live/example.org/privkey.pem;
#ssl_dhparam /config/nginx/dhparams.pem;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_prefer_server_ciphers on;


client_max_body_size 0;


location /.well-known/ {
        root /var/www/openmediavault;
}

Alles anzeigen

/etc/nginx/site-enabled/irc

Code

server {
        server_name irc.example.org;
        include /etc/nginx/http;
}
server {
        server_name irc.example.org;
        include /etc/nginx/https;
        index index.html index.htm index.php;
        location ~ / {
            proxy_set_header        Host $host;
                proxy_set_header        X-Real-IP $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header        X-Forwarded-Proto $scheme;
                proxy_pass http://127.0.0.1:9000;
        }
}

Alles anzeigen