| |
| config main global |
| option uci_enable 'true' |
| |
| config server '_lan' |
| list listen '443 ssl default_server' |
| list listen '[::]:443 ssl default_server' |
| option server_name '_lan' |
| list include 'restrict_locally' |
| list include 'conf.d/*.locations' |
| option uci_manage_ssl 'self-signed' |
| option ssl_certificate '/etc/nginx/conf.d/_lan.crt' |
| option ssl_certificate_key '/etc/nginx/conf.d/_lan.key' |
| option ssl_session_cache 'shared:SSL:32k' |
| option ssl_session_timeout '64m' |
| option access_log 'off; # logd openwrt' |
| |
| config server '_redirect2ssl' |
| list listen '80' |
| list listen '[::]:80' |
| option server_name '_redirect2ssl' |
| option return '302 https://$host$request_uri' |