/home/ container / nginx / conf.d /default.conf

[lukyn94]

Hello,
I am having trouble enabling https.

I rewrite the line in the config:
listen 32588;

To this line:
listen 32588 ssl http2;

I restart the server and the value returns to its original state.
Is this an error?

My config:

`

server {
# 1. Povolení SSL a HTTP/2 na vašem portu
listen 32588 ssl http2;
server_name customdomain.fun;

# 2. Cesty k certifikátům, které jste uložili na server
ssl_certificate /home/container/certs/cert.pem;
ssl_certificate_key /home/container/certs/key.pem;

# 3. Doporučená bezpečnostní nastavení pro SSL/TLS
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';

# --- Zbytek vaší původní konfigurace (beze změny) ---
access_log /home/container/logs/naccess.log;
error_log  /home/container/logs/nerror.log error;

root /home/container/www;
index index.html index.htm index.php;
charset utf-8;

location / {
    try_files $uri $uri/ /index.php?$query_string;
}

location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt  { access_log off; log_not_found off; }

client_max_body_size 100m;
client_body_timeout 120s;
sendfile off;

location ~ \.php$ {
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass unix:/home/container/tmp/php-fpm.sock;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param HTTP_PROXY "";
    fastcgi_intercept_errors off;
    fastcgi_buffer_size 16k;
    fastcgi_buffers 4 16k;
    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
}

location ~ /\.git {
    deny all;
}

location ~ /\.ht {
    deny all;
}

}

`

I would appreciate any advice. THX

[Ym0T]

You need to change the indentation of "listen.." so that it doesn’t get overwritten after a web server restart.
So instead of this:
"listen.."

For example like this:
" listen.."

[lukyn94]

I just have one comment:
If I wanted to share FTP with a partner, I don't like that there is a file.sh and other config files that they shouldn't be messing with.
Are you planning to create a blacklist for bookmarks and files that cannot be opened via web administration or FTP, or will they simply be hidden?

Otherwise, I commend the whole idea and encourage you to continue; you are doing a great job! <3

[Ym0T]

Thank you very much for the compliment. There are already rough concepts planned to make a kind of Hosting Edition out of it, so that the essential framework of the web server cannot be changed or viewed.