parametrize the server name in nginx conf -


i have multiple domains pointing same vm. (mydomain1.com, mydomain2.com, mydomain3.eu) have huge nginx.conf looks this:

server {     listen 443 ssl;     server_name   *.mydomain1.com;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain1.com.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain1.com.key;     # hundred more lines of rules } server {     listen 443 ssl;     server_name   *.mydomain2.com;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain2.com.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain2.com.key;     # same hundred more lines of rules } server {     listen 443 ssl;     server_name   *.mydomain3.eu;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain3.eu.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain3.eu.key;     # same hundred more lines of rules }

is there way shorten - because i'm cloning such huge code blcok when have add new domain , change 3 lines domain name differs. thought kind of parametrization, (without knowing correct syntax):

server_name = {request_server_name} ssl_certificate  /etc/nginx/ssl/${server_name}.chained.crt; ssl_certificate_key  /etc/nginx/ssl/${server_name}.key;

is possible? how?

there 2 things can it

multi domain san certificate

you can purchase multi domain san certificate. allows use different domains in same certificate. way wont have have multiple blocks. in case using self-signed certificate can still create san certificate yourself

use openrestry or nginx+lua

you can use openresty or nginx lua support , use ssl_certificate_by_lua_block directive of same.

syntax: ssl_certificate_by_lua_block { lua-script }

context: server

phase: right-before-ssl-handshake

this directive runs user lua code when nginx start ssl handshake downstream ssl (https) connections.

it particularly useful setting ssl certificate chain , corresponding private key on per-request basis. useful load such handshake configurations nonblockingly remote (for example, cosocket api). , 1 can per-request ocsp stapling handling in pure lua here well.

https://github.com/openresty/lua-nginx-module#ssl_certificate_by_lua_block

also see below articles example implementations

https://medium.com/@mtourne/how-to-use-nginx-for-ssl-termination-for-any-domain-dc2e2c630058

https://blog.readme.io/auto-generating-ssl-certificates-for-custom-domains-using-lets-encrypt/


Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more