sleeplessbeastie's notes

rewrite ^(.*) https://my.domain.eu$1 permanent;

http {  
 
    [...]
 
    client_max_body_size 10m;
 
    set_real_ip_from  10.10.10.3;
    real_ip_header    X-Real-IP;
 
    [...]
 
    server {
        listen       443;
        server_name  my.domain.eu;
        gzip on;
        ssl on;
        ssl_certificate /etc/priv/ssl/my.domain.eu.crt;
        ssl_certificate_key /etc/priv/ssl/my.domain.eu.key;
        ssl_ciphers HIGH:!ADH:!MD5;
        ssl_prefer_server_ciphers on;
        ssl_protocols SSLv3 TLSv1;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 5m;
 
        location / {
          root   /var/www/wp;
          index  index.php;
        }
 
        if (-f $request_filename) {
          break;
        }
 
        if (-d $request_filename) {
          break;
        }
 
        error_page  404  = /index.php?q=$uri;
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   /usr/local/www/nginx-dist;
        }
 
        location ~ \.php$ {
            include fastcgi_params;
            fastcgi_pass  unix:/var/run/nginx/fcgi.socket;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME /var/www/wp/$fastcgi_script_name;
            fastcgi_param REMOTE_ADDR $http_x_real_ip;
            }
        }
    }
 
    server {
        listen       80;
        server_name  my.domain.eu;
        gzip on;
 
        [...]
 
    }
}

define('FORCE_SSL_LOGIN', true);
define('FORCE_SSL_ADMIN', true);