Skip to content

nginx - program cheatsheet

install

nginx

sudo apt-get install nginx

certbot

because no ssl means no service.

sudo apt-get install certbot
apt-get install python3-certbot-nginx
ref

use

generate dhparams

sudo mkdir /etc/nginx/ssl
sudo openssl dhparam -out /etc/nginx/ssl/dhparam-2048.pem 2048
sudo openssl dhparam -out /etc/nginx/ssl/dhparam-4096.pem 4096
* will take several minutes

control nginx

sudo systemctl stop nginx
sudo systemctl start nginx
sudo systemctl status nginx

test nginx configuration

sudo nginx -t

export DOMAIN_NAME=koad.sh
sudo nano /etc/nginx/sites-available/$DOMAIN_NAME
sudo ln -s /etc/nginx/sites-available/$DOMAIN_NAME /etc/nginx/sites-enabled/$DOMAIN_NAME

obtain a certificate

let certbot obtain a certificate for us and apply the default nginx SSL configuration like follows: --> 

sudo certbot certonly --rsa-key-size 4096 --nginx -d $DOMAIN_NAME

or using webroot 

sudo certbot certonly --rsa-key-size 4096 --webroot --webroot-path /var/www/html -d $DOMAIN_NAME

pay attention

when using lets encrypt, be sure to read the output. 

IMPORTANT NOTES:
 - Your account credentials have been saved in your Certbot
   configuration directory at /etc/letsencrypt. You should make a
   secure backup of this folder now. This configuration directory will
   also contain certificates and private keys obtained by Certbot so
   making regular backups of this folder is ideal.

Redirects

301 permanently

this will redirect your site, permanently 

location /old.html {
rewrite ^(.*)$ https://mywebsite.com/new.html permanent;
}

302 temporarily

this will redirect your site 

location /old.html {
rewrite ^(.*)$ https://mywebsite.com/new.html redirect;
}

from one domain to another 

server {
      listen 80;
      hostname mywebsite.com www.mywebsite.com;
      rewrite ^ http://mynewwebsite.com$request_uri? redirect;
}

from www to non-www 

server {
    server_name www.devisers.in;
    return 301 $scheme://devisers.in$request_uri;
}