MedITron/PTSRaiAgent
4
0
Fork 0
Code Issues 21 Pull Requests Actions Packages Projects Releases Wiki Activity

chore(devops): HTTPS для meditron.tenvex.ru #93

Merged
Eleboba merged 1 commits from chore/nginx-https-prod into dev 2026-10-04 16:25:26 +03:00
Conversation 0 Commits 1 Files Changed 1
+13 -2
1 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit f14efac7ac - Show all commits
infra/deploy/nginx-meditron.conf
+13 -2
View File
@@ -3,8 +3,7 @@
# /api/ FastAPI (127.0.0.1:8010) # /api/ FastAPI (127.0.0.1:8010)
# /doctor/ Streamlit doctor dashboard + demo console (127.0.0.1:8511, baseUrlPath=doctor) # /doctor/ Streamlit doctor dashboard + demo console (127.0.0.1:8511, baseUrlPath=doctor)
# dev.meditron.tenvex.ru — HTTPS (Let's Encrypt, certbot certonly --nginx, auto-renew). # dev.meditron.tenvex.ru — HTTPS (Let's Encrypt, certbot certonly --nginx, auto-renew).
# meditron.tenvex.ru — HTTP until its DNS record exists; then: certbot certonly --nginx -d meditron.tenvex.ru # meditron.tenvex.ru — HTTPS (same stack for now; will serve the main branch after promotion).
# and move it into an HTTPS block like dev.meditron.
map $http_upgrade $ptsr_connection_upgrade { map $http_upgrade $ptsr_connection_upgrade {
default upgrade; default upgrade;
@@ -69,6 +68,18 @@ server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name meditron.tenvex.ru; server_name meditron.tenvex.ru;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name meditron.tenvex.ru;
ssl_certificate /etc/letsencrypt/live/meditron.tenvex.ru/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/meditron.tenvex.ru/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
access_log /var/log/nginx/ptsr-access.log; access_log /var/log/nginx/ptsr-access.log;
client_max_body_size 5m; client_max_body_size 5m;