도메인 발급 및 DNS 설정

freenom.PNG

ncloud.PNG

Nginx configuration (backend)

Behind a reverse proxy | Socket.IO

Backend default.conf

server {
    server_name  j148.tk www.j148.tk;

    location /api/ {
        proxy_pass <http://localhost:5001/>;
    }

    location /socket.io {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;

        proxy_pass <http://localhost:8000>;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/j148.tk/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/j148.tk/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = www.j148.tk) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    if ($host = j148.tk) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen       80;
    server_name  j148.tk www.j148.tk;
    return 404; # managed by Certbot

}

https://j148.tk/api → location /api 5001

wss://j148.tk → location /socket.io 8000

Let’s Encrypt 클라이언트를 통한 Nginx SSL 적용