diff --git a/templates/bot.conf.j2 b/templates/bot.conf.j2 new file mode 100644 index 0000000..9e22a1e --- /dev/null +++ b/templates/bot.conf.j2 @@ -0,0 +1,35 @@ +# templates/bot.conf.j2 + +server { + listen 80; + server_name {{ domain_name }}; + + location /.well-known/acme-challenge/ { + root /var/www/html; + } + + location / { + return 301 https://$host$request_uri; + } +} + +server { + listen 443 ssl; + server_name {{ domain_name }}; + + # Пути к сертификатам, которые сгенерирует Certbot + ssl_certificate /etc/letsencrypt/live/{{ domain_name }}/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/{{ domain_name }}/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + proxy_pass http://127.0.0.1:{{ bot_internal_port }}; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +}