Jedediah wrote:Tu n'as pas fait d'erreur de copié/collé ?

[....] Restarting nginx: nginxnginx: [emerg] "ssl_certificate" directive is duplicate in /
etc/nginx/sites-enabled/rutorrent.conf:15
nginx: configuration file /etc/nginx/nginx.conf test failed

server {
	listen 80 default_server;
	listen 443 default_server ssl;
	server_name _;

	index index.html index.php;
	charset utf-8;

	ssl on;
	ssl_certificate /etc/nginx/keys/monDomaine.com.crt-unified;
	ssl_certificate_key /etc/nginx/keys/monDomaine.com.key;

	client_max_body_size 10M;

	ssl_certificate /etc/nginx/ssl/server.crt;
	ssl_certificate_key /etc/nginx/ssl/server.key;

	access_log /var/log/nginx/rutorrent-access.log combined;
	error_log /var/log/nginx/rutorrent-error.log error;

	error_page 500 502 503 504 /50x.html;
	location = /50x.html { root /usr/share/nginx/html; }

	auth_basic "seedbox";
	auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd";

	location = /favicon.ico {
		access_log off;
		log_not_found off;
	}

ssl_certificate /etc/nginx/ssl/server.crt;

user www-data;
worker_processes auto;

pid /var/run/nginx.pid;
events { worker_connections 1024; }

http {
	include /etc/nginx/mime.types;
	default_type  application/octet-stream;

	access_log /var/log/nginx/access.log combined;
	error_log /var/log/nginx/error.log error;

	sendfile on;
	keepalive_timeout 20;
	keepalive_disable msie6;
	keepalive_requests 100;
	tcp_nopush on;
	tcp_nodelay off;
	server_tokens off;

	gzip on;
	gzip_buffers 16 8k;
	gzip_comp_level 5;
	gzip_disable "msie6";
	gzip_min_length 20;
	gzip_proxied any;
	gzip_types text/plain text/css application/json  application/x-javascript text/xml application/xml application/xml+rss  text/javascript;
	gzip_vary on;

	include /etc/nginx/sites-enabled/*.conf;
}

service nginx restart

[ ok ] Restarting nginx: nginx.

ssl on;
ssl_certificate /etc/nginx/keys/monnomdedomaine.com.crt-unified;
ssl_certificate_key /etc/nginx/keys/monnomdedomaine.com.key;

ssl on;
ssl_certificate /etc/nginx/keys/zarev.ovh.crt-unified;
ssl_certificate_key /etc/nginx/keys/zarev.ovh.key;

# To deal with segfaults
ssl_session_cache shared:SSL:30m;
ssl_session_timeout 1h;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";

#enables all versions of TLS, but not SSLv2 or 3 which are weak and now deprecated.
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

#Disables all weak ciphers + DH 4096 bits
ssl_ciphers "ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL";
ssl_dhparam /etc/ssl/dh/dhparam.pem;
ssl_prefer_server_ciphers on;