diff --git a/ext/nginx.conf.d/01_production.conf.template b/ext/nginx.conf.d/01_production.conf.template index b593546..13d52e0 100644 --- a/ext/nginx.conf.d/01_production.conf.template +++ b/ext/nginx.conf.d/01_production.conf.template @@ -39,8 +39,8 @@ server { root $PRODUCTION_NGINX_PUBLIC; index index.html index.htm index.php; - ssl_certificate /etc/letsencrypt/live/ensl.org/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/ensl.org/privkey.pem; + ssl_certificate /etc/letsencrypt/live/ensl.org-0001/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/ensl.org-0001/privkey.pem; # ssl-cert /etc/ssl/certs/ssl-cert-snakeoil.pem # ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key diff --git a/ext/nginx.conf.d/02_gathers.conf.template b/ext/nginx.conf.d/02_gathers.conf.template index 0392bd2..d22c656 100644 --- a/ext/nginx.conf.d/02_gathers.conf.template +++ b/ext/nginx.conf.d/02_gathers.conf.template @@ -12,8 +12,8 @@ server { # Redirect to HTTPS error_page 497 https://$host:$server_port$request_uri; - ssl_certificate /etc/letsencrypt/live/ensl.org/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/ensl.org/privkey.pem; + ssl_certificate /etc/letsencrypt/live/ensl.org-0001/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/ensl.org-0001/privkey.pem; # ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA; # ssl_session_timeout 1d; diff --git a/ext/nginx.conf.d/03_staging.conf.template b/ext/nginx.conf.d/03_staging.conf.template index 9fadcdb..39e3fa6 100644 --- a/ext/nginx.conf.d/03_staging.conf.template +++ b/ext/nginx.conf.d/03_staging.conf.template @@ -3,7 +3,7 @@ # Use it in production or copy it over upstream ensl_staging { - server staging:$PUMA_STAGING_PORT; + server staging:$STAGING_PUMA_PORT; # server unix:/var/tmp/puma.$RAILS_ENV.sock fail_timeout=0; }