diff --git a/.github/workflows/server-prod-deploy.yml b/.github/workflows/server-prod-deploy.yml index 05a1660bd..257af4999 100644 --- a/.github/workflows/server-prod-deploy.yml +++ b/.github/workflows/server-prod-deploy.yml @@ -36,6 +36,11 @@ jobs: rm -rf ./config/application.yml echo "$APPLICATION_YML_CONTENT" > ./config/application.yml + echo "=== 📂 File Creation Check ===" + ls -al ./config/ + echo "=== 📄 Content Check (First 3 lines) ===" + head -n 3 ./config/application.yml + - name: Deploy with Docker Compose working-directory: ./server run: | diff --git a/server/certbot/conf/options-ssl-nginx.conf b/server/certbot/conf/options-ssl-nginx.conf new file mode 100644 index 000000000..9b9b240de --- /dev/null +++ b/server/certbot/conf/options-ssl-nginx.conf @@ -0,0 +1,11 @@ +# This file contains important security parameters. If you modify it, +# ensure that you fully understand what you are doing. + +ssl_session_cache shared:le_nginx_SSL:10m; +ssl_session_timeout 1440m; +ssl_session_tickets off; + +ssl_protocols TLSv1.2 TLSv1.3; +ssl_prefer_server_ciphers off; + +ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; \ No newline at end of file diff --git a/server/certbot/conf/ssl-dhparams.pem b/server/certbot/conf/ssl-dhparams.pem new file mode 100644 index 000000000..e28517f0c --- /dev/null +++ b/server/certbot/conf/ssl-dhparams.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBDAKCAQEAzjhIJHYxUJOw+Qd3kYO6dGYJnN/0rV+yMPZyueWkOl5+OfBS+X6k +EpgLTyhA25R+9EM8Qls50kE898i2l0+VTd10M22y2iBgvxC+tgJhBMY8ZdHzO5Ao +8qmzNdOW0eJI9ydqCjV9WeF0OvDG++7psWAcpCmFZ5qktBnB//w2I8UrvzpNP2GK +EX04YzzCE5h6kOAYrQsu/Uip1yP8sSldpoziq3nyhm0hDHtjHklnrCxAG1Im5DdW +5hgXrdDlySzWop+05S/gMu6BhI2RW3ULvRgwph74jx8WsUnWEG0PcnLHfkbE3/9J +aZnFUhtSoEWpHLtpiCNoA7jBA9co9taMZwIBAgICAOE= +-----END DH PARAMETERS----- diff --git a/server/docker-compose.yml b/server/docker-compose.yml index 926764047..3ab5b16d4 100644 --- a/server/docker-compose.yml +++ b/server/docker-compose.yml @@ -23,6 +23,7 @@ services: max-size: "10m" max-file: "3" + nginx: container_name: nginx-proxy image: nginx:latest @@ -46,6 +47,7 @@ services: max-size: "10m" max-file: "3" + certbot: container_name: certbot image: certbot/certbot