Forum Debian Users Gang

<VirtualHost *:8080>
        ServerName djlive.pl
        ServerName www.djlive.pl

        ServerAdmin kontakt@djlive.pl
        DocumentRoot /var/www/html/djlivepl

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        <Directory "/var/www/html/djlivepl">
                AllowOverride All
                Options -Indexes
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/error-djlivepl.log
        CustomLog ${APACHE_LOG_DIR}/access-djlivepl.log combined
</VirtualHost>
<VirtualHost *:8080>
        ServerName api.djlive.pl

        ServerAdmin kontakt@djlive.pl
        DocumentRoot /var/www/html/djlivepl/api

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        <Directory "/var/www/html/djlivepl/api">
                AllowOverride All
                Options -Indexes
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/error-djlivepl-api.log
        CustomLog ${APACHE_LOG_DIR}/access-djlivepl-api.log combined
</VirtualHost>

proxy_cache_path /tmp/nginx levels=1:2 keys_zone=static:10m inactive=4h max_size=1g;
#proxy_cache_key "$request_method$host$request_uri";
server {
    listen   80; 
    listen 443 ssl;
    include ssl-djlivepl;

    gzip on;
    gzip_disable "msie6";

    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
    gzip_types text/plain text/css application/json application/x-javascript application/javascript text/xml application/xml application/xml+rss text/javascript;
    
    root /var/www/html/djlivepl; 
    index index.php index.html;

    server_name djlive.pl api.djlive.pl app.djlive.pl; 

    #location / {
        #proxy_set_header X-Real-IP  $remote_addr;
        #proxy_set_header X-Forwarded-For $remote_addr;
        #proxy_set_header Host $host;
        #proxy_pass http://127.0.0.1:8080;
    #}
    #location /ajax/chat {
        #fastcgi_pass 127.0.0.1:9000;
        #include fastcgi.conf;
    #}
    location = /ajax/chat/chatMessages.php {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        include fastcgi.conf;
    }
    #rewrite ^/v2/(.*)/streamInfo$ /api/v2/stream.php?name=$1 last;
    #location = /api/v2/stream.php {
        #fastcgi_pass unix:/var/run/php5-fpm.sock;
        #include fastcgi.conf;
    #}
    location = /ajax/stream/viewers.php {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        include fastcgi.conf;
    }
    location = /ajax/privatemessages/getUnreadMessages.php {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        include fastcgi.conf;
    }
    location = /ajax/privatemessages/getMessagesList_html.php {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        include fastcgi.conf;
    }
    #location = /ajax/stream/viewers.php {
    #    fastcgi_pass unix:/var/run/php5-fpm.sock;
    #    include fastcgi.conf;
    #}
    location /.well-known {
        alias /var/www/html/djlivepl/.well-known;
    }
    location /nginx-status {
        stub_status on;
        access_log off;
    }
    location ~* \.(eot|ttf|woff|woff2)$ {
        add_header Access-Control-Allow-Origin *;
    }
    location / {
        try_files $uri @proxy;
    }
    location ~* \.(js|css|jpg|jpeg|gif|png|svg|ico|pdf|html|htm)$ {
        expires      14d;
#        proxy_pass http://127.0.0.1:8080;
#        proxy_set_header Host $host;
#        proxy_cache static;
#        proxy_cache_valid 200 1d;
#        add_header X-Proxy-Cache $upstream_cache_status;
    }
    location @proxy {
        proxy_pass http://127.0.0.1:8080;
        include /etc/nginx/proxy_params;
    }
    location ~* \.php$ {
        proxy_pass http://127.0.0.1:8080;
        fastcgi_buffers 16 16k; 
        fastcgi_buffer_size 32k;
        include /etc/nginx/proxy_params;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen   80; 
    listen 443 ssl;
    include ssl-djlivepl;
    server_name www.djlive.pl; 
    return 301 https://djlive.pl$request_uri;
}
server {
    listen   80; 
    listen 443 ssl;
    include ssl-djlivepl;


    #root /var/www/html/djlivepl; 
    index index.php index.html;

    server_name live.djlive.pl sys.djlive.pl edge.live.djlive.pl v1.djlive.pl v.djlive.pl edge.preview.djlive.pl live-hls.djlive.pl stream_main.sterowanie24.pl; 
    location /.well-known {
        alias /var/www/html/djlivepl/.well-known;
    }

    location / {
        proxy_set_header X-Real-IP  $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header REMOTE_ADDR $remote_addr;
        proxy_pass http://10.94.94.101:80;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen   80; 
    listen 443 ssl http2;
    include ssl-djlivepl;

    location /.well-known {
        alias /var/www/html/djlivepl/.well-known;
    }

    #root /var/www/html/djlivepl; 
    index index.php index.html;

    server_name img.djlive.pl; 

    location /preview {
        proxy_set_header X-Real-IP  $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header REMOTE_ADDR $remote_addr;
        proxy_pass http://10.94.94.101:80;
    }
    location ~ /\.ht {
        deny all;
    }
}

curl -I https://djlive.eu/
curl: (51) SSL: certificate subject name (djlive.pl) does not match target host name 'djlive.eu'

openssl s_client -connect djlive.eu:443
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = djlive.pl
verify return:1
---
Certificate chain
 0 s:/CN=djlive.pl
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=djlive.pl
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3269 bytes and written 342 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 37BEBC52534211E957FF117C8A7DE7AD9E93BDD71BF6B9F7388DE0A4D213D16B
    Session-ID-ctx: 
    Master-Key: CE36465F31AE2EF487930206D5911F03AD3994785DB9132C6D617516F47FD828EB2CFFE198592C8D2EE86189F4E73248
    TLS session ticket lifetime hint: 86400 (seconds)
    TLS session ticket:
    0000 - 5a 9b 54 40 f5 ad 32 55-59 c7 a7 ac be 94 74 56   Z.T@..2UY.....tV
    0010 - d1 eb ae 96 9c 80 fe c2-59 6e 01 3c 52 f0 1b 6b   ........Yn.<R..k
    0020 - 14 cb 88 64 51 88 de 9e-1a 61 74 da a8 90 e0 62   ...dQ....at....b
    0030 - cb 0d 07 f1 82 45 d7 ba-ef 25 d5 55 ce 90 0e 6a   .....E...%.U...j
    0040 - 75 7d ee 82 36 58 f6 a7-eb 41 4d 36 67 0d 08 e0   u}..6X...AM6g...
    0050 - 49 f4 e0 92 ae 9b fc 0b-c5 93 f2 b3 42 49 a0 4a   I...........BI.J
    0060 - bc 16 44 8a 8d b6 4e dd-65 3a 83 2f c6 11 f2 78   ..D...N.e:./...x
    0070 - 44 b4 1e 5e 8f 70 14 1d-a7 d5 87 25 fc 67 30 a4   D..^.p.....%.g0.
    0080 - f0 fb 40 2b 7c 1e 4e 59-12 dc a5 54 9f 79 62 91   ..@+|.NY...T.yb.
    0090 - e1 2d 0c 82 71 be 01 03-02 8d df 48 ea c5 d9 95   .-..q......H....
    00a0 - e3 90 a6 24 bd af 5a 5f-c3 a1 73 88 c8 65 58 6b   ...$..Z_..s..eXk

    Start Time: 1509069172
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---
closed

TLS SNI support enabled