99 lines
2.5 KiB
Markdown
99 lines
2.5 KiB
Markdown
|
# Nginx SSL Manual Configuration Checklist
|
||
|
|
|
||
|
|
**Last Updated:** 2026-01-31
|
||
|
|
**Document Version:** 1.0
|
||
|
|
**Status:** Active Documentation
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
**Date**: 2026-01-09
|
||
|
|
**NPM URL**: `http://192.168.11.26:81`
|
||
|
|
**Credentials**: `nsatoshi2007@hotmail.com` / `L@ker$2010`
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Quick Start
|
||
|
|
|
||
|
|
1. **Access NPM**: Open `http://192.168.11.26:81`
|
||
|
|
2. **Log in**: `nsatoshi2007@hotmail.com` / `L@ker$2010`
|
||
|
|
3. **Configure each domain** using the checklist below
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Configuration Checklist
|
||
|
|
|
||
|
|
For each domain, check off when complete:
|
||
|
|
|
||
|
|
### sankofa.nexus Zone
|
||
|
|
|
||
|
|
- [ ] `sankofa.nexus` → `http://192.168.11.140:80`
|
||
|
|
- [ ] `www.sankofa.nexus` → `http://192.168.11.140:80`
|
||
|
|
- [ ] `phoenix.sankofa.nexus` → `http://192.168.11.140:80`
|
||
|
|
- [ ] `www.phoenix.sankofa.nexus` → `http://192.168.11.140:80`
|
||
|
|
- [ ] `the-order.sankofa.nexus` → `http://192.168.11.140:80`
|
||
|
|
|
||
|
|
### d-bis.org Zone
|
||
|
|
|
||
|
|
- [ ] `explorer.d-bis.org` → `http://192.168.11.140:80`
|
||
|
|
- [ ] `rpc-http-pub.d-bis.org` → `https://192.168.11.252:443` (WebSocket ✅)
|
||
|
|
- [ ] `rpc-ws-pub.d-bis.org` → `https://192.168.11.252:443` (WebSocket ✅)
|
||
|
|
- [ ] `rpc-http-prv.d-bis.org` → `https://192.168.11.251:443` (WebSocket ✅)
|
||
|
|
- [ ] `rpc-ws-prv.d-bis.org` → `https://192.168.11.251:443` (WebSocket ✅)
|
||
|
|
- [ ] `dbis-admin.d-bis.org` → `http://192.168.11.130:80`
|
||
|
|
- [ ] `dbis-api.d-bis.org` → `http://192.168.11.155:3000`
|
||
|
|
- [ ] `dbis-api-2.d-bis.org` → `http://192.168.11.156:3000`
|
||
|
|
- [ ] `secure.d-bis.org` → `http://192.168.11.130:80`
|
||
|
|
|
||
|
|
### mim4u.org Zone
|
||
|
|
|
||
|
|
- [ ] `mim4u.org` → `http://192.168.11.19:80`
|
||
|
|
- [ ] `www.mim4u.org` → `http://192.168.11.19:80`
|
||
|
|
- [ ] `secure.mim4u.org` → `http://192.168.11.19:80`
|
||
|
|
- [ ] `training.mim4u.org` → `http://192.168.11.19:80`
|
||
|
|
|
||
|
|
### defi-oracle.io Zone
|
||
|
|
|
||
|
|
- [ ] `rpc.public-0138.defi-oracle.io` → `https://192.168.11.252:443` (WebSocket ✅)
|
||
|
|
|
||
|
|
**Total: 19 domains**
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Per-Domain Configuration Steps
|
||
|
|
|
||
|
|
For each domain:
|
||
|
|
|
||
|
|
1. **Click**: Proxy Hosts → Add Proxy Host
|
||
|
|
|
||
|
|
2. **Details Tab**:
|
||
|
|
- Domain Names: `[domain]`
|
||
|
|
- Scheme: `http` or `https` (based on target)
|
||
|
|
- Forward Hostname/IP: `[target IP]`
|
||
|
|
- Forward Port: `[target port]`
|
||
|
|
- Block Common Exploits: ✅
|
||
|
|
- Websockets Support: ✅ (for RPC domains)
|
||
|
|
|
||
|
|
3. **SSL Tab**:
|
||
|
|
- Request a new SSL Certificate
|
||
|
|
- Email: `nsatoshi2007@hotmail.com`
|
||
|
|
- I Agree to Terms: ✅
|
||
|
|
- Force SSL: ✅
|
||
|
|
- HTTP/2 Support: ✅
|
||
|
|
- HSTS Enabled: ✅
|
||
|
|
|
||
|
|
4. **Save**
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
## Verification
|
||
|
|
|
||
|
|
After configuring all domains:
|
||
|
|
|
||
|
|
```bash
|
||
|
|
bash scripts/nginx-proxy-manager/verify-ssl-config.sh
|
||
|
|
```
|
||
|
|
|
||
|
|
---
|
||
|
|
|
||
|
|
**Last Updated**: 2026-01-09
|