free
/
freedombone
Suivre 1
Favoriser 0
Bifurcation 0
Code Tickets 0 Demandes d'ajout 0 Versions 0 Wiki Activité
Parcourir la source

Create a self signed cert for the local domain

Bob Mottram il y a 6 ans
Parent
22436fbf55
révision
b45b94cd5e
1 fichiers modifiés avec 28 ajouts et 3 suppressions
Vue séparée Afficher les stats Diff
  1. 28
    3
      src/freedombone-utils-web

+ 28
- 3
src/freedombone-utils-web Voir le fichier 

@@ -1149,7 +1149,7 @@ function install_web_local_user_interface {
1149 1149
1150 1150 
     { echo '<html>';
1151 1151 
       echo '  <body>';
1152 
-      echo "  This is a test on $local_hostname";
1152 
+      echo "  This is a test on ${local_hostname}";
1153 1153 
       echo '  </body>';
1154 1154 
       echo '</html>'; } > "/var/www/${local_hostname}/htdocs/index.html"
1155 1155 
 
@@ -1160,8 +1160,33 @@ function install_web_local_user_interface {
1160 1160 
       echo "  server_name ${local_hostname};";
1161 1161 
       echo "  root /var/www/${local_hostname}/htdocs;";
1162 1162 
       echo '  index index.html;';
1163 
-      echo '}'; } > "$nginx_file"
1164 
-    nginx_ensite "$local_hostname"
1163 
+      echo '';
1164 
+      echo '  access_log /dev/null;';
1165 
+      echo '  error_log /dev/null;';
1166 
+      echo '}';
1167 
+      echo '';
1168 
+      echo 'server {';
1169 
+      echo '  listen 443 ssl;';
1170 
+      echo '  #listen [::]:443 ssl;';
1171 
+      echo "  server_name ${local_hostname};";
1172 
+      echo "  root /var/www/${local_hostname}/htdocs;";
1173 
+      echo '  index index.html;';
1174 
+      echo '';
1175 
+      echo '  access_log /dev/null;';
1176 
+      echo '  error_log /dev/null;';
1177 
+      echo ''; } >> "$nginx_file"
1178 
+
1179 
+    nginx_ssl "${local_hostname}"
1180 
+    nginx_security_options "${local_hostname}"
1181 
+
1182 
+    { echo '  add_header Strict-Transport-Security max-age=0;';
1183 
+      echo '}'; } >> "$nginx_file"
1184 
+
1185 
+    if [ ! -f "/etc/ssl/certs/${local_hostname}.crt" ]; then
1186 
+        "${PROJECT_NAME}-addcert" -h "${local_hostname}" --dhkey "${DH_KEYLENGTH}"
1187 
+    fi
1188 
+
1189 
+    nginx_ensite "${local_hostname}"
1165 1190
1166 1191 
     # Compatibility with FreedomBox android app
1167 1192 
     # The installed apps get published to a json file called "1"