free
/
freedombone
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Browse Source

Create a self signed cert for the local domain

Bob Mottram 6 years ago
parent
22436fbf55
commit
b45b94cd5e
1 changed files with 28 additions and 3 deletions
Unified View Show Diff Stats
  1. 28
    3
      src/freedombone-utils-web

+ 28
- 3
src/freedombone-utils-web View File

1149
1149
1150 
     { echo '<html>';
 1150 
     { echo '<html>';
1151 
       echo '  <body>';
 1151 
       echo '  <body>';
1152 
-      echo "  This is a test on $local_hostname";
1152 
+      echo "  This is a test on ${local_hostname}";
1153 
       echo '  </body>';
 1153 
       echo '  </body>';
1154 
       echo '</html>'; } > "/var/www/${local_hostname}/htdocs/index.html"
 1154 
       echo '</html>'; } > "/var/www/${local_hostname}/htdocs/index.html"
1155
1155
1160 
       echo "  server_name ${local_hostname};";
 1160 
       echo "  server_name ${local_hostname};";
1161 
       echo "  root /var/www/${local_hostname}/htdocs;";
 1161 
       echo "  root /var/www/${local_hostname}/htdocs;";
1162 
       echo '  index index.html;';
 1162 
       echo '  index index.html;';
1163 
-      echo '}'; } > "$nginx_file"
1164 
-    nginx_ensite "$local_hostname"
1163 
+      echo '';
1164 
+      echo '  access_log /dev/null;';
1165 
+      echo '  error_log /dev/null;';
1166 
+      echo '}';
1167 
+      echo '';
1168 
+      echo 'server {';
1169 
+      echo '  listen 443 ssl;';
1170 
+      echo '  #listen [::]:443 ssl;';
1171 
+      echo "  server_name ${local_hostname};";
1172 
+      echo "  root /var/www/${local_hostname}/htdocs;";
1173 
+      echo '  index index.html;';
1174 
+      echo '';
1175 
+      echo '  access_log /dev/null;';
1176 
+      echo '  error_log /dev/null;';
1177 
+      echo ''; } >> "$nginx_file"
1178 
+
1179 
+    nginx_ssl "${local_hostname}"
1180 
+    nginx_security_options "${local_hostname}"
1181 
+
1182 
+    { echo '  add_header Strict-Transport-Security max-age=0;';
1183 
+      echo '}'; } >> "$nginx_file"
1184 
+
1185 
+    if [ ! -f "/etc/ssl/certs/${local_hostname}.crt" ]; then
1186 
+        "${PROJECT_NAME}-addcert" -h "${local_hostname}" --dhkey "${DH_KEYLENGTH}"
1187 
+    fi
1188 
+
1189 
+    nginx_ensite "${local_hostname}"
1165
1190
1166 
     # Compatibility with FreedomBox android app
 1191 
     # Compatibility with FreedomBox android app
1167 
     # The installed apps get published to a json file called "1"
 1192 
     # The installed apps get published to a json file called "1"