Complete Refactor - Changed to Django

nginx/certs/certificate.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

nginx/certs/key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDEJfUgpbnyYsI0
+BBn2CmdMo1jc9hQgbc3nC9aiz4N6Hhx7xuP5+rQMpScCnHaQQaDmM/Yt/OMKkKGR
+Ylh9xaXxzh9H5aZlSNNrPavTvQo7SfMy8nnoODyqWPlzoNOgkCpT733GQw1ZFIsb
+UIjhP6Mi3b3KoUSji0gHMu9v5ZGdlBlaRPO+gMXflOeR4aCZuj6/rMC1TJtDh6nX
+MwZuuUS8g6qXn0hvHXRy3aZU0xECQ+YyMoRF+Sjd9Y2cOeeoNvx1vorYUmnPjCMt
+LhRufm6PD0xMTBf/IVPSuLj5/N2eZLE2z8NtZ3ZSDs2BhdRtZaLfPR/0U0eaF0b9
++k24eSIhAgMBAAECggEANztQ+O5xm7T/ZlI5VTS8vbHJVf7cz/zbW9HTkGjKZtqP
+vrLUgxF7HYxrnaqdICW6vtem3HA3JkRvmlaNAG1lOt+Fo2MhJagKEEp/VdIHTYaX
+OqNYfHFJc9Y1978zmCTAJn5rdiZvXcQRH5Hf2T1oHGtABAzBHSQdFhnbnjCQfkQ0
+SnPlrzyJi6V4A6f8Ydgkx96c53QvoslRru1it2ge7hMUlCsds+o88B13nsdoYsQ7
+Ifa+d4OgFAY3+T3S//kmChXV3Ig+B9M+2f0SCmI4YVJEM1szw2WewOb4JW7jV7cf
+2PKTLLkbB0iSxvB29hrtGiwE/SVo+2kq/FXHFwMf2QKBgQDEW//pOqtKIlBvx2j4
+d3pzpUgYRS3b+ab2gy65gr7mPtH9sp5IXtOrfeNaMRugIE/0Pb1z1vORWRtnnm2d
+5U1+UWzhyIwqNsPaU7mcazBC/pezqX+DRf+h1Yz8QxIfq2EuqWge5YGUUywx7QzX
++V+r4wx5udA1Q/4wucsazz4mzwKBgQD/uYsmYfRhS84yeBjv6V2G6BKiTjN1Ffti
+ZMJ+vX58CU4XOPanPRi/kwiP1USlJrIUqSj0YVeqjoDPhM5rzpASTxpds7dXe+kD
+jcvdNIxrKVTPoY8VT7XgntfEbAUPl+vnw457yJ9U4YJVOeyuybpmOdnR9znEuR3a
+guBwk5RkDwKBgDwMjoR6xqtTNxoX94gUscPwBc42ScH95Qt6Lq3YyByNlZZqK3Gi
+XkURqJeKcRJVD154CxoD4FTQ1Uqo7ojc+QfqSsv5krPOL7Ly685kEUxLo4T0DuTM
+YVLShd0XfdFljcDBWfAo66m6jcdu4QCjaJieRNBs/LltY6zvBKfcPPuNAoGBANIE
+UMpqAijx99stFNXbo0sLR1pyvQH41qa9N5qdB8bYYYDi8Hbyz2NuXsa5kRHNUM11
+C8SAOV5CgHltiZWyZFIVEwNHeFhp1Dlt97Ko2HWd0SBgf8Ex4J4j9fJEAHgI/d4u
+ldMFNg2g0sgptT7rP6F6+2/cCV6N5X2ypJ7wJRtzAoGAWQ0Agm7DPT9Xchqx0F0v
+jRp+yWMFktPg9MFFZGFgf5H5p3oVcklViV0YpAorBQrONNfRDenRoghhN2jikOhp
+iLJOKn+ABo0k8zqeEw4Q/NX7T0B9nGsx4JQY+tMzLHcn/ckBZ5RfoFTsZJd+V3W6
+1wsDuZxxPViQdzNilJ8SZGM=
+-----END PRIVATE KEY-----

nginx/certs/options-ssl-nginx.conf

@@ -0,0 +1,14 @@
+# This file contains important security parameters. If you modify this file
+# manually, Certbot will be unable to automatically provide future security
+# updates. Instead, Certbot will print and log an error message with a path to
+# the up-to-date file that you will need to refer to when manually updating
+# this file.
+
+ssl_session_cache shared:le_nginx_SSL:10m;
+ssl_session_timeout 1440m;
+ssl_session_tickets off;
+
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers off;
+
+ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";

nginx/configs/nginx.conf

@@ -0,0 +1,27 @@
+# This file should be put under /etc/nginx/conf.d/
+# Or place as /etc/nginx/nginx.conf
+
+user  nginx;
+worker_processes  auto;
+
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    real_ip_header X-Forwarded-For;
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log main;
+    include /etc/nginx/conf.d/*.conf;
+
+    types_hash_bucket_size 128;
+}

nginx/configs/sites/default.conf

@@ -0,0 +1,31 @@
+# Default NGINX Config
+server {
+    listen 80;
+    listen [::]:80;
+    server_name keywarden.dev.ntbx.io;
+
+    return 301 https://$host$request_uri;
+}
+
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+        http2 on;
+
+    server_name keywarden.dev.ntbx.io;
+
+    ssl_certificate /certs/certificate.pem;
+    ssl_certificate_key /certs/key.pem;
+    include /certs/options-ssl-nginx.conf;
+
+    client_max_body_size 50M;
+
+    location / {
+        proxy_pass  http://keywarden:8000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto  $scheme;
+    }
+}