Hetzner Deploy Version (hoffentlich)

v2_nginx/nginx.conf

@@ -38,7 +38,7 @@ http {
     # Admin Panel
     server {
         listen 80;
-        server_name admin-panel-undso.z5m7q9dk3ah2v1plx6ju.com;
+        server_name admin-panel-undso.intelsight.de;
         
         # Redirect HTTP to HTTPS
         return 301 https://$server_name$request_uri;
@@ -46,7 +46,7 @@ http {
 
     server {
         listen 443 ssl;
-        server_name admin-panel-undso.z5m7q9dk3ah2v1plx6ju.com;
+        server_name admin-panel-undso.intelsight.de;
 
         # SSL-Zertifikate (echte Zertifikate)
         ssl_certificate /etc/nginx/ssl/fullchain.pem;
@@ -87,14 +87,14 @@ http {
     # API Server (für später)
     server {
         listen 80;
-        server_name api-software-undso.z5m7q9dk3ah2v1plx6ju.com;
+        server_name api-software-undso.intelsight.de;
         
         return 301 https://$server_name$request_uri;
     }
 
     server {
         listen 443 ssl;
-        server_name api-software-undso.z5m7q9dk3ah2v1plx6ju.com;
+        server_name api-software-undso.intelsight.de;
 
         ssl_certificate /etc/nginx/ssl/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/privkey.pem;

v2_nginx/ssl/.gitignore

@@ -0,0 +1,10 @@
+# Ignore all SSL certificates
+*.pem
+*.crt
+*.key
+*.p12
+*.pfx
+
+# But keep the README
+!README.md
+!.gitignore

v2_nginx/ssl/README.md

@@ -0,0 +1,29 @@
+# SSL Certificate Directory
+
+This directory should contain the following files for SSL to work:
+
+1. **fullchain.pem** - The full certificate chain
+2. **privkey.pem** - The private key (keep this secure!)
+3. **dhparam.pem** - Diffie-Hellman parameters for enhanced security
+
+## For intelsight.de deployment:
+
+Copy your SSL certificates here:
+```bash
+cp /path/to/fullchain.pem ./
+cp /path/to/privkey.pem ./
+```
+
+Generate dhparam.pem if not exists:
+```bash
+openssl dhparam -out dhparam.pem 2048
+```
+
+## File Permissions:
+```bash
+chmod 644 fullchain.pem
+chmod 600 privkey.pem
+chmod 644 dhparam.pem
+```
+
+**IMPORTANT**: Never commit actual SSL certificates to the repository!