AWS Beanstalk Letsencrypt - PullRequest
Новая
       5

AWS Beanstalk Letsencrypt

0 голосов
/ 27 сентября 2018

У меня проблема с моим конфигом nginx.Я создал папку .ebextensions и файл .config

. Я пытаюсь запустить мои сертификаты, после чего добавлю еще один файл конфигурации nginx.

вот моя конфигурация 

Resources:
  sslSecurityGroupIngress:
    Type: AWS::EC2::SecurityGroupIngress
    Properties:
      GroupId: {"Fn::GetAtt" : ["AWSEBSecurityGroup", "GroupId"]}
      IpProtocol: tcp
      ToPort: 443
      FromPort: 443
      CidrIp: 0.0.0.0/0

files:

  # The Nginx config forces https, and is meant as an example only.
  /tmp/https_custom.pre:
    mode: "000644"
    owner: root
    group: root
    content: |
       # HTTPS server
       server {
           listen      443 default ssl;
           error_page  497 https://$host$request_uri;

           ssl_certificate      /etc/letsencrypt/live/ebcert/fullchain.pem;
           ssl_certificate_key  /etc/letsencrypt/live/ebcert/privkey.pem;
           ssl_session_timeout  5m;
           ssl_protocols  TLSv1.1 TLSv1.2;
           ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
           ssl_prefer_server_ciphers   on;
           if ($ssl_protocol = "") {
             rewrite ^ https://$host$request_uri? permanent;
           }


           location / {
               proxy_pass  http://127.0.0.1:8080;
               proxy_set_header   Connection "";
               proxy_http_version 1.1;
               proxy_set_header        Host            $host;
               proxy_set_header        X-Real-IP       $remote_addr;
               proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
               proxy_set_header        Upgrade         $http_upgrade;
               proxy_set_header        Connection      "upgrade";
           }
       }

packages:
  yum:
    epel-release: []

container_commands:
  10_installcertbot:
    command: "wget https://dl.eff.org/certbot-auto;chmod a+x certbot-auto"
  20_getcert:
    command: "sudo ./certbot-auto certonly --debug --non-interactive --email ${EMAIL} --agree-tos --standalone --domains ${CERTDOMAIN} --keep-until-expiring --pre-hook \"service nginx stop\" --staging"
  30_link:
    command: "ln -sf /etc/letsencrypt/live/${CERTDOMAIN} /etc/letsencrypt/live/ebcert"
  40_config:
    command: "cp /tmp/https_custom.pre /etc/nginx/conf.d/https_custom.conf"

но файла https_custom.conf там нет.кажется, что папка /etc/nginx/conf.d перезаписана.

...