| Path : /etc/nginx/sites-enabled/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : //etc/nginx/sites-enabled/veridatait.conf |
############################################
# 1) HTTP (80) üzerinden gelen tüm istekleri HTTPS + www'ye yönlendir
############################################
server {
listen 80;
listen [::]:80; # IPv6 desteği varsa
server_name veridatait.com www.veridatait.com;
return 301 https://www.veridatait.com$request_uri;
}
############################################
# 2) HTTPS (443) üzerinden gelen non-www'yi www'ye yönlendir
############################################
server {
listen 443 ssl http2;
listen [::]:443 ssl http2; # IPv6 desteği varsa
server_name veridatait.com;
# -- SSL ayarları (Sertifika, Key, SSL parametreleri) --
ssl_certificate /etc/letsencrypt/live/www.veridatait.com/fullchain.pem; # Tek sertifika SAN içeriyorsa
ssl_certificate_key /etc/letsencrypt/live/www.veridatait.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
return 301 https://www.veridatait.com$request_uri;
}
############################################
# 3) Asıl site bloğu (HTTPS + www)
############################################
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name www.veridatait.com;
root /var/www/html/veridatait.com/;
index index.php index.html index.htm;
# Maksimum yükleme boyutu, timeout vb.
client_max_body_size 100M;
send_timeout 300;
# Hata sayfaları
error_page 404 /404.php;
error_page 403 /ERR/403.php;
error_page 401 /ERR/401.php;
error_page 500 /ERR/500.php;
# Güvenlik başlıkları (HSTS, X-Frame-Options vb.)
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
# Eğer /en/home sayfasını gerçekten kullanmak istiyorsanız, bu rewrite'ı kaldırın veya düzeltin
# rewrite ^/en/home/?$ / permanent;
# 301 yönlendirmesi
location = /is-ortaklarimiz/ {
return 301 https://www.veridatait.com/?lang=tr#partners;
}
# /iletisim/ yönlendirmesi
location = /iletisim/ {
return 301 https://www.veridatait.com/contact?lang=tr;
}
# Tüm istekleri Node.js veya benzeri bir uygulamaya yönlendirmek için proxy
location / {
proxy_pass http://127.0.0.1:7111;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# -- SSL ayarları (Sertifika, Key, SSL parametreleri) --
ssl_certificate /etc/letsencrypt/live/www.veridatait.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/www.veridatait.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}