45 lines
1.4 KiB
Text
Executable file
45 lines
1.4 KiB
Text
Executable file
# آینه Maven — maven.mirror.hesabix.ir (پروکسی کش Nginx → maven.myket.ir)
|
|
# الگوی f.mirror.hesabix.ir: HTTP + HTTPS روی مبدأ
|
|
#
|
|
# نصب: sudo bash scripts/install_maven_mirror_nginx.sh
|
|
# گواهی: /etc/nginx/ssl/maven.mirror.hesabix.ir.{key,fullchain.pem}
|
|
|
|
proxy_cache_path /var/cache/nginx/maven_cache
|
|
levels=1:2
|
|
keys_zone=maven_cache:200m
|
|
max_size=10g
|
|
inactive=30d
|
|
use_temp_path=off;
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name maven.mirror.hesabix.ir;
|
|
|
|
access_log /var/log/nginx/maven.mirror.hesabix.ir_access.log;
|
|
error_log /var/log/nginx/maven.mirror.hesabix.ir_error.log;
|
|
|
|
location ^~ /.well-known/acme-challenge/ {
|
|
default_type "text/plain";
|
|
alias /var/lib/hesabix/acme/.well-known/acme-challenge/;
|
|
}
|
|
|
|
include /etc/nginx/snippets/maven.mirror-hesabix-server.inc;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
server_name maven.mirror.hesabix.ir;
|
|
|
|
ssl_certificate /etc/nginx/ssl/maven.mirror.hesabix.ir.fullchain.pem;
|
|
ssl_certificate_key /etc/nginx/ssl/maven.mirror.hesabix.ir.key;
|
|
# صرفاً self-signed — بدون include از certbot
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers off;
|
|
|
|
access_log /var/log/nginx/maven.mirror.hesabix.ir_access.log;
|
|
error_log /var/log/nginx/maven.mirror.hesabix.ir_error.log;
|
|
|
|
include /etc/nginx/snippets/maven.mirror-hesabix-server.inc;
|
|
}
|