sudo apt update

wget https://packages.microsoft.com/config/ubuntu/20.04/packages-microsoft-prod.deb -O packages-microsoft-prod.deb

sudo dpkg -i packages-microsoft-prod.deb

sudo apt-get update; \
  sudo apt-get install -y apt-transport-https && \
  sudo apt-get update && \
  sudo apt-get install -y aspnetcore-runtime-3.1

sudo apt-get update; \
  sudo apt-get install -y apt-transport-https && \
  sudo apt-get update && \
  sudo apt-get install -y dotnet-sdk-3.1

dotnet --list-runtimes
dotnet --list-sdks

sudo apt install nginx

server {
  listen     	*:80;
  server_name	CoreSampleWeb.cz
  return     	301 https://$host$request_uri;
}

server {
  listen                    *:443 ssl;
  server_name               CoreSampleWeb.cz;
  ssl_certificate           /etc/ssl/certs/nginx-selfsigned.crt;
  ssl_certificate_key       /etc/ssl/private/nginx-selfsigned.key;
  ssl_protocols             TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers on;
  ssl_ciphers               "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
  ssl_ecdh_curve            secp384r1;
  ssl_session_cache         shared:SSL:10m;
  ssl_session_tickets       off;
  # ssl_stapling             on; #ensure your cert is capable
  # ssl_stapling_verify      on; #ensure your cert is capable

  # Enabling HSTS, (max-age in seconds fo 2 years)
  # The first time your site is accessed using HTTPS and it returns the Strict-Transport-Security header, 
  # the browser records this information, so that future attempts to load the site using HTTP will automatically use HTTPS instead.
  # It helps to prevent MITM attack.
  # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
  add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";

  # X-Frame-Options allows content publishers to prevent their own content from being used in an invisible frame by attackers. 
  # The DENY option is the most secure, preventing any use of the current page in a frame. More commonly, SAMEORIGIN is used, 
  # as it does enable the use of frames, but limits them to the current domain.
  # This option is related to frame and iframe (inline frame) html tag.
  # The method exploiting this vulnerability is called clickjacking.
  add_header X-Frame-Options DENY;

  # This header prevents most browsers from MIME-sniffing a response away from the declared content type, as the header instructs 
  # the browser not to override the response content type. With the nosniff option, if the server says the content is "text/html", 
  # the browser renders it as "text/html".
  # https://www.keycdn.com/support/what-is-mime-sniffing
  add_header X-Content-Type-Options nosniff;

  # Add client IP to the header address chain
  # https://en.wikipedia.org/wiki/X-Forwarded-For
  proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;

  # Add information about client protocol to the header
  # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
  proxy_set_header   X-Forwarded-Proto $scheme;

  # Other settings, related to optimalization and web socket (SignalR)
  # proxy_http_version 1.1;
  # proxy_set_header   Upgrade $http_upgrade;
  # proxy_set_header   Connection keep-alive;
  # proxy_set_header   Host $host;
  # proxy_cache_bypass $http_upgrade;

  # Redirects all traffic
  location / {
    proxy_pass http://localhost:5000;
    # limit_req  zone=one burst=10 nodelay;
  }
}

sudo nginx -t
sudo nginx -s reload

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt

# Enable or disable Nginx to start automatically when the server boots
sudo systemctl enable nginx
sudo systemctl disable nginx

# Start, stop, restart or reload service
sudo systemctl start nginx
sudo systemctl stop nginx
sudo systemctl restart nginx
sudo systemctl reload nginx

# Check status of the service
sudo systemctl status nginx

mkdir -p ~/workspace/CoreSampleWeb
cd ~/workspace/CoreSampleWeb

dotnet new mvc

public IConfiguration Configuration { get; }

    public void ConfigureServices(IServiceCollection services)
    {
        services.AddControllersWithViews();
        services.Configure<ForwardedHeadersOptions>(options =>
        {
            options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
        });
    }

    public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
    {
        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
            app.UseForwardedHeaders();
        }
        else
        {
            app.UseExceptionHandler("/Home/Error");
            app.UseForwardedHeaders();
            app.UseHsts();
        }

        //app.UseHttpsRedirection();
        app.UseStaticFiles();

dotnet publish --configuration release

sudo rm -rf /var/www/CoreSampleWeb/*
sudo cp -r ~/workspace/CoreSampleWeb/bin/Release/netcoreapp3.1/publish/* /var/www/CoreSampleWeb/

dotnet CoreSampleWeb.dll

127.0.0.1  CoreSampleWeb.cz

sudo ufw enable
sudo ufw allow 80
sudo ufw allow 443
sudo ufw status

sudo apt install net-tools
ifconfig

sudo service network-manager restart

192.168.0.178 CoreSampleWeb.cz