wprobot / nginx-recipes-for-the-lazy

Copy-paste ready Nginx configuration for static sites, reverse proxy, single page web apps, php, wordpress, ...

Nginx Recipes For The Lazy

Tested on Ubuntu 16.04 and 18.04

Static Server

static.conf

Static Server for Clientside Routers (React, Angular, Vue.js, ...)

spwa.conf

HTTP Proxy Server (Node.js, Python, ...)

proxy.conf

PHP Proxy Server

php.conf

WordPress Server

wordpress.conf

SSL

LetsEncrypt certbot.eff.org

/etc/ssl/certs/dhparam.pem

openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096

/etc/ssl/certs/ssl-cert-snakeoil.pem
/etc/ssl/private/ssl-cert-snakeoil.key

make-ssl-cert generate-default-snakeoil --force-overwrite 

Wildcard Certificate with Cloudflare

certbot certonly \
    --preferred-challenges dns-01 \
    --dns-cloudflare --dns-cloudflare-credentials /root/.cloudflare.ini \
    -d 'example.com,*.example.com'

# Renewal
certbot renew \
    --dns-cloudflare --dns-cloudflare-credentials /root/.cloudflare.ini \
    --pre-hook "systemctl stop nginx" \
    --post-hook "systemctl start nginx"
    # REMINDER: --dry-run

/root/.cloudflare.ini

dns_cloudflare_email = "[email protected]"
dns_cloudflare_api_key = "abcdefghijklmnopqrstuvwxyz0"