X-Git-Url: https://git.ucc.asn.au/?a=blobdiff_plain;f=server-configs%2Fnginx%2Fsites-enabled%2Fmctxconfig;fp=server-configs%2Fnginx%2Fsites-enabled%2Fmctxconfig;h=1be361a1d8b29a18815ff842675ffd5ca462589b;hb=50183d6a5cd89f8eff2cbe12262b46f5ec68d8a2;hp=82d972a3d5651bf783195d2e10e7fa6066e2d109;hpb=27b5b2ed628abc8d8c56c3e371f8411aa8ec7eec;p=matches%2FMCTX3420.git

diff --git a/server-configs/nginx/sites-enabled/mctxconfig b/server-configs/nginx/sites-enabled/mctxconfig
index 82d972a..1be361a 100644
--- a/server-configs/nginx/sites-enabled/mctxconfig
+++ b/server-configs/nginx/sites-enabled/mctxconfig
@@ -1,5 +1,21 @@
 server {
-	listen 80;
+	#Redirect HTTP to HTTPS
+	listen         [::]:80;
+	return 301 https://$host$request_uri;
+}
+
+server {
+	listen 443;
+
+	ssl on;
+	ssl_certificate /usr/share/nginx/conf/server.crt;
+	ssl_certificate_key /usr/share/nginx/conf/server.key;
+
+	ssl_session_timeout 5m;
+
+	ssl_protocols SSLv3 TLSv1;
+	ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
+	ssl_prefer_server_ciphers on;
 
 	#Change this to match your root directory
 	root /usr/share/nginx/www;