server {
listen IP_ADDRESS;
server_name site.ru www.site.ru;
rewrite ^
https://site.ru$request_uri? permanent; #301-redirect
}
server {
listen IP_ADDRESS:443 ssl;
server_name site.ru;
root /opt/redmine/public;
passenger_enabled on;
client_max_body_size 10m; # Max attachemnt size
keepalive_timeout 60;
ssl_certificate /opt/nginx/ssl/cetr.chained.crt;
ssl_certificate_key /opt/nginx/ssl/cert.key;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "RC4:HIGH:!aNULL:!MD5:!kEDH";
add_header Strict-Transport-Security 'max-age=604800';
}
}