sni_forward: use 444 as the internal nginx port because the 'front' sni forwarder needs to use 443 and this would otherwise conflict

This commit is contained in:
Alexandre Aubin 2023-12-10 20:20:54 +01:00
parent 3e2167c4e0
commit bd363c04cf
3 changed files with 4 additions and 4 deletions

View file

@ -43,7 +43,7 @@ server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
{% else %} {% else %}
listen 127.0.0.1:443 ssl http2; listen 127.0.0.1:444 ssl http2;
{% endif %} {% endif %}
server_name {{ domain }}; server_name {{ domain }};
@ -91,7 +91,7 @@ server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
{% else %} {% else %}
listen 127.0.0.1:443 ssl http2; listen 127.0.0.1:444 ssl http2;
{% endif %} {% endif %}
server_name xmpp-upload.{{ domain }}; server_name xmpp-upload.{{ domain }};
root /dev/null; root /dev/null;

View file

@ -15,7 +15,7 @@ stream {
{% endfor %} {% endfor %}
upstream https_default_backend { upstream https_default_backend {
server 127.0.0.1:443; server 127.0.0.1:444;
} }
server { server {

View file

@ -11,7 +11,7 @@ server {
listen 443 ssl http2 default_server; listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server; listen [::]:443 ssl http2 default_server;
{% else %} {% else %}
listen 127.0.0.1:443 ssl http2 default_server; listen 127.0.0.1:444 ssl http2 default_server;
{% endif %} {% endif %}
include /etc/nginx/conf.d/security.conf.inc; include /etc/nginx/conf.d/security.conf.inc;