Add

docker-compose.yml

@@ -24,9 +24,11 @@ services:
     container_name: sec_lab_victim_nginx
     ports:
       - "58690:80"
+      - "58691:80"
     volumes:
       - ./:/var/www/html:ro
       - ./docker/nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./docker/nginx/certs:/etc/nginx/certs
     depends_on:
       - php
     networks:
@@ -68,6 +70,7 @@ services:
     volumes:
       - ./:/var/www/html:ro # حالا هکر هم به کدهای لاراول دسترسی دارد
       - ./docker/nginx/hacker.conf:/etc/nginx/conf.d/default.conf:ro # کانفیگ اختصاصی هکر
+      - ./docker/nginx/certs:/etc/nginx/certs
     depends_on:
       - php
     networks:

docker/nginx/certs/kr-rezvan.ir-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

docker/nginx/certs/kr-rezvan.ir.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

docker/nginx/default.conf

@@ -1,6 +1,16 @@
 server {
     listen 80;
     server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir;
+    return 301 https://$host$request_uri; # ری‌دایرکت به نسخه امن
+}
+
+server {
+    listen 443 ssl;
+    server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir;
+
+    ssl_certificate     /etc/nginx/certs/kr-rezvan.ir.pem;
+    ssl_certificate_key /etc/nginx/certs/kr-rezvan.ir-key.pem;
+
     root /var/www/html/public;
     index index.php;
 

docker/nginx/hacker.conf

@@ -1,7 +1,16 @@
 server {
     listen 80;
-    # این انجینیکس فقط به درخواست‌های دامنه هکر جواب می‌دهد
     server_name hackerapp.eitebar.ir;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name hackerapp.eitebar.ir;
+
+    ssl_certificate     /etc/nginx/certs/kr-rezvan.ir.pem;
+    ssl_certificate_key /etc/nginx/certs/kr-rezvan.ir-key.pem;
+
     root /var/www/html/public;
     index index.php;