Nginx-Usage

/nginx/conf.d:/etc/nginx/conf.d
/nginx/ssl:/etc/nginx/ssl
/nginx/passwds:/etc/nginx/passwds
/nginx/www:/etc/nginx/www
/nginx/log:/var/log/nginx

default.conf
headers.config
proxy.config
ssl.config

Exemple d'un vhost app.conf

server {
  listen 8443 ssl http2;
  server_name app1.domain.tld;

  ssl_certificate /etc/nginx/ssl/live/domain.tld/cert.pem;
  ssl_certificate_key /etc/nginx/ssl/live/domain.tld/privkey.pem;
  ssl_trusted_certificate /etc/nginx/ssl/live/domain.tld/chain.pem;

  include /etc/nginx/conf.d/ssl.config;
  include /etc/nginx/conf.d/headers.config;

  ## authentication ##
  auth_basic "app1.domain.tld";
  auth_basic_user_file "/etc/nginx/passwds/app1_passwd";

  location / {
    proxy_pass http://app1:8080;
    include /etc/nginx/conf.d/proxy.config;
  }

  access_log /var/log/nginx/app1-access.log combined;
  error_log /var/log/nginx/app1-error.log error;
}

vhost sur le port 80 : default.conf (je l'utilise pour faire les challenges let's encrypt)

server {
  listen 8080;
  charset utf-8;
  server_name *.domain.tld;

  root /etc/nginx/www/acme;

  location /.well-known/acme-challenge {}
}

Ajouter lien

sudo ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default 

Suppr ln site lien :

sudo unlink /etc/nginx/sites-enabled/default