upstream        tomcat {
         server  127.0.0.1:8080  fail_timeout=0;
 }

# hoticle.net => www.hoticle.net
server {
        listen 80;
        server_name hoticle.net;
        return 301 $scheme://www.hoticle.net$request_uri;
}

# www.hoticle.net 설정
server {
        listen 80;
        listen [::]:80;

        server_name www.hoticle.net;

        # Let's Encrypt 관련 디렉토리
        location /.well-known {
                # Note that a request for /.well-known/test.html whill
                # look for /var/www/ssl-prof-rancher/.well-known/test.html
                # and not /var/www/ssl-proof/rancher/test.html
                root /var/www/ssl-proof/tomcat/;
        }

        location / {
                proxy_redirect off;
                proxy_pass_header Server;

                proxy_set_header Host $http_host;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Forwarded-Port $server_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Scheme $scheme;
                proxy_pass http://tomcat;
                charset utf-8;
        }
}
 

# www.bbb.net 설정
server {
        listen 80;
        listen [::]:80;

        server_name www.bbb.net;

        # Let's Encrypt 관련 디렉토리
        location /.well-known {
                # Note that a request for /.well-known/test.html whill
                # look for /var/www/ssl-prof-rancher/.well-known/test.html
                # and not /var/www/ssl-proof/rancher/test.html
                root /var/www/ssl-proof/tomcat/;
        }

        location / {
                proxy_redirect off;
                proxy_pass_header Server;

                proxy_set_header Host $http_host;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Forwarded-Port $server_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Scheme $scheme;
                proxy_pass http://tomcat;
                charset utf-8;
        }
} 

 <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               URIEncoding="UTF-8"
               address="127.0.0.1"
               redirectPort="8443" />

...


       <Host name="www.hoticle.net" appBase="/var/www/Hoticle" autoDeploy="true"  xmlValidation="false" xmlNamespaceAware="false">
              <Context path="/" docBase="" reloadable="true" />
      </Host>
      <Host name="www.bbb.net" appBase="/var/www/bbb" autoDeploy="true"  xmlValidation="false" xmlNamespaceAware="false">
              <Context path="/" docBase="" reloadable="true" />
      </Host>

  </Engine>

  </Service>
</Server> 

# Let's Encrypt
30 2 * * * certbot renew --noninteractive --renew-hook "/bin/systemctl reload nginx" >> /var/log/le-renew.log

# cat /etc/nginx/sites-available/default
# Default server configuration
#
server {
        listen 80 default_server;
        listen [::]:80 default_server;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.php index.html index.htm index.nginx-debian.html;

        server_name _;

        location / {
                try_files $uri $uri/ =404;
        }

        location ~ ^/~(?<user>.+?)(?<path>/.*)?$ {
                alias /home/$user/public_html$path;
                autoindex on;

                location ~ \.php$ {
                        if (!-f $request_filename) { return 404; }

                        fastcgi_pass unix:/run/php/php7.0-fpm.sock;
                        fastcgi_intercept_errors on;
                        include fastcgi_params;
                        fastcgi_param  SCRIPT_FILENAME $request_filename;
                }
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;

                # With php7.0-cgi alone:
                # fastcgi_pass 127.0.0.1:9000;
                # With php7.0-fpm:
                fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        }


        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        location ~ /\.ht {
                deny all;
        }

} 

설치방법

config system
        option hostname 'LEDE'
        option ttylogin '0'
        option log_size '64'
        option urandom_seed '0'
        option zonename 'Asia/Seoul'
        option timezone 'KST-9'
        option log_proto 'udp'
        option conloglevel '8'
        option cronloglevel '8'

# /etc/init.d/system restart

C:\Users\fehead>ping 192.168.0.222

Ping 192.168.0.222 32바이트 데이터 사용:
192.168.0.139의 응답: 대상 호스트에 연결할 수 없습니다.

192.168.0.222에 대한 Ping 통계:
    패킷: 보냄 = 1, 받음 = 1, 손실 = 0 (0% 손실),

BusyBox v1.24.2 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 DESIGNATED DRIVER (Bleeding Edge, 50088)
 -----------------------------------------------------
  * 2 oz. Orange Juice         Combine all juices in a
  * 2 oz. Pineapple Juice      tall glass filled with
  * 2 oz. Grapefruit Juice     ice, stir well.
  * 2 oz. Cranberry Juice
 -----------------------------------------------------
root@OpenWrt:/#

root@OpenWrt:/# passwd
Changing password for root
New password:

root@OpenWrt:/# opkg update
Downloading http://downloads.openwrt.org/snapshots/trunk/ramips/mt7621/packages/base/Packages.gz.
Updated list of available packages in /var/opkg-lists/designated_driver_base.
Downloading http://downloads.openwrt.org/snapshots/trunk/ramips/mt7621/packages/base/Packages.sig.
...

 root@OpenWrt:/# opkg install luci

...