From 32f17d9b4bdfa4eda54d50cb4bde684cb1754c03 Mon Sep 17 00:00:00 2001 From: Pierre-Olivier Mercier Date: Sat, 26 Feb 2022 01:37:50 +0100 Subject: [PATCH] server: Transmit SNI --- server.yml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/server.yml b/server.yml index bf0694d..709a056 100644 --- a/server.yml +++ b/server.yml @@ -493,6 +493,8 @@ files: } location /iamalive { proxy_pass https://82.64.31.248/challenge; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.0.1; @@ -575,6 +577,8 @@ files: } location /challenge { proxy_pass https://82.64.31.248/challenge; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -583,6 +587,8 @@ files: } location /toctoc { proxy_pass https://82.64.31.248/toctoc; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -591,6 +597,8 @@ files: } location /echorequest { proxy_pass https://82.64.31.248/echorequest; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -599,6 +607,8 @@ files: } location /testdisk { proxy_pass https://82.64.31.248/testdisk; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -621,6 +631,8 @@ files: } location /challenge { proxy_pass https://82.64.31.248/challenge; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -629,6 +641,8 @@ files: } location /toctoc { proxy_pass https://82.64.31.248/toctoc; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -637,6 +651,8 @@ files: } location /echorequest { proxy_pass https://82.64.31.248/echorequest; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -645,6 +661,8 @@ files: } location /testdisk { proxy_pass https://82.64.31.248/testdisk; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -653,6 +671,8 @@ files: } location /sshkeys { proxy_pass https://82.64.31.248/sshkeys; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -661,6 +681,8 @@ files: } location /api/students { proxy_pass https://82.64.31.248; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -681,6 +703,8 @@ files: } location /challenge { proxy_pass https://82.64.31.248/challenge; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -689,6 +713,8 @@ files: } location /echorequest { proxy_pass https://82.64.31.248/echorequest; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -697,6 +723,8 @@ files: } location /testdisk { proxy_pass https://82.64.31.248/testdisk; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -705,6 +733,8 @@ files: } location /sshkeys { proxy_pass https://82.64.31.248/sshkeys; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1; @@ -713,6 +743,8 @@ files: } location /api/students { proxy_pass https://82.64.31.248; + proxy_ssl_server_name on; + proxy_ssl_name adlin.nemunai.re; proxy_set_header Host adlin.nemunai.re; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-By 172.23.200.1;