From f14efac7ac7eccfa4d2a0adf065282dded47376b Mon Sep 17 00:00:00 2001 From: Lacky1234union Date: Sun, 4 Oct 2026 16:22:49 +0300 Subject: [PATCH] chore(devops): HTTPS for meditron.tenvex.ru too Co-Authored-By: Claude Opus 5.5 --- infra/deploy/nginx-meditron.conf | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/infra/deploy/nginx-meditron.conf b/infra/deploy/nginx-meditron.conf index 7f7120f..22da8aa 100644 --- a/infra/deploy/nginx-meditron.conf +++ b/infra/deploy/nginx-meditron.conf @@ -3,8 +3,7 @@ # /api/ FastAPI (127.0.0.1:8010) # /doctor/ Streamlit doctor dashboard + demo console (127.0.0.1:8511, baseUrlPath=doctor) # dev.meditron.tenvex.ru — HTTPS (Let's Encrypt, certbot certonly --nginx, auto-renew). -# meditron.tenvex.ru — HTTP until its DNS record exists; then: certbot certonly --nginx -d meditron.tenvex.ru -# and move it into an HTTPS block like dev.meditron. +# meditron.tenvex.ru — HTTPS (same stack for now; will serve the main branch after promotion). map $http_upgrade $ptsr_connection_upgrade { default upgrade; @@ -69,6 +68,18 @@ server { listen 80; listen [::]:80; server_name meditron.tenvex.ru; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name meditron.tenvex.ru; + + ssl_certificate /etc/letsencrypt/live/meditron.tenvex.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/meditron.tenvex.ru/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; access_log /var/log/nginx/ptsr-access.log; client_max_body_size 5m;