parametrize the server name in nginx conf -


i have multiple domains pointing same vm. (mydomain1.com, mydomain2.com, mydomain3.eu) have huge nginx.conf looks this:

server {     listen 443 ssl;     server_name   *.mydomain1.com;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain1.com.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain1.com.key;     # hundred more lines of rules } server {     listen 443 ssl;     server_name   *.mydomain2.com;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain2.com.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain2.com.key;     # same hundred more lines of rules } server {     listen 443 ssl;     server_name   *.mydomain3.eu;     ssl  on;     ssl_certificate  /etc/nginx/ssl/mydomain3.eu.chained.crt;     ssl_certificate_key  /etc/nginx/ssl/mydomain3.eu.key;     # same hundred more lines of rules }

is there way shorten - because i'm cloning such huge code blcok when have add new domain , change 3 lines domain name differs. thought kind of parametrization, (without knowing correct syntax):

server_name = {request_server_name} ssl_certificate  /etc/nginx/ssl/${server_name}.chained.crt; ssl_certificate_key  /etc/nginx/ssl/${server_name}.key;

is possible? how?

there 2 things can it

multi domain san certificate

you can purchase multi domain san certificate. allows use different domains in same certificate. way wont have have multiple blocks. in case using self-signed certificate can still create san certificate yourself

use openrestry or nginx+lua

you can use openresty or nginx lua support , use ssl_certificate_by_lua_block directive of same.

syntax: ssl_certificate_by_lua_block { lua-script }

context: server

phase: right-before-ssl-handshake

this directive runs user lua code when nginx start ssl handshake downstream ssl (https) connections.

it particularly useful setting ssl certificate chain , corresponding private key on per-request basis. useful load such handshake configurations nonblockingly remote (for example, cosocket api). , 1 can per-request ocsp stapling handling in pure lua here well.

https://github.com/openresty/lua-nginx-module#ssl_certificate_by_lua_block

also see below articles example implementations

https://medium.com/@mtourne/how-to-use-nginx-for-ssl-termination-for-any-domain-dc2e2c630058

https://blog.readme.io/auto-generating-ssl-certificates-for-custom-domains-using-lets-encrypt/


Comments

Post a Comment

Popular posts from this blog

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m
Read more

javascript - Z-index in d3.js -

i have map , when hover effect on region of map below yellow line , circle, last ones disappear. how can solve problem? http://jsfiddle.net/ot21n9qx/ var arc = g.append("path") .style("fill", "none") .style("stroke", "yellow") .style("stroke-width", 2) .attr("d", "m" + pathorigin[0] + "," + pathorigin[1] + " q" + svgpoint[0] + "," + pathorigin[1] + " " + svgpoint[0] + "," + svgpoint[1]); var circlesize = d3.scale.linear() .domain([0, 0.5, 1]) .range([4, 10, 4]); svg not have z order draws objects in order created. need create path , circle after create highlight regions. here forked fiddle: http://jsfiddle.net/o00fzgaf/1/
Read more