CloudPanel v1 installieren

server {
  listen 80;
  listen [::]:80;
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  {{ssl_certificate_key}}
  {{ssl_certificate}}
  server_name cloudpanel.example.com;
  {{root}}
  {{nginx_access_log}}
  {{nginx_error_log}}
  if ($bad_bot = 1) {
    return 403;
  }
  if ($scheme != "https") {
    rewrite ^ https://$host$uri permanent;
  }
  #if ($http_x_forwarded_proto != https) {
  #  return 301 https://$host$request_uri;
  #}
  
  #if ($http_x_forwarded_proto ~ https) {
  #  set $fastcgi_https on;
  #}
  
# Enable gzip but do not remove ETag headers
gzip on;
gzip_disable "MSIE [1-6]\\.(?!.*SV1)";
gzip_proxied any;
gzip_comp_level 5;
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
gzip_vary on;

### Secure Headers ###
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
add_header Referrer-Policy no-referrer;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Robots-Tag all;
add_header Referrer-Policy no-referrer-when-downgrade;
add_header X-Frame-Options "SAMEORIGIN";

# Disable FLoC calculation
add_header Permissions-Policy "interest-cohort=()";


  location ~ /.well-known {
    auth_basic off;
    allow all;
  }
  location / {
    proxy_set_header Host $http_host; 
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_pass https://127.0.0.1:8443/;
    proxy_max_temp_file_size 0;
    proxy_connect_timeout 7200;
    proxy_send_timeout 7200;
    proxy_read_timeout 7200;
    proxy_buffer_size 128k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_temp_file_write_size 256k;
 }

}