{"id":18367,"date":"2025-04-17T04:02:27","date_gmt":"2025-04-17T01:02:27","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/nginx-ve-lets-encrypt-ile-guvenli-ters-proxy-kurulumu\/"},"modified":"2025-04-17T04:02:27","modified_gmt":"2025-04-17T01:02:27","slug":"nginx-ve-lets-encrypt-ile-guvenli-ters-proxy-kurulumu","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/nginx-ve-lets-encrypt-ile-guvenli-ters-proxy-kurulumu\/","title":{"rendered":"Nginx ve Let’s Encrypt ile G\u00fcvenli Ters Proxy Kurulumu"},"content":{"rendered":"

<\/p>\n

Nginx ve Let’s Encrypt ile G\u00fcvenli Ters Proxy Kurulumu<\/p>\n

Merhaba! Fatih Soysal olarak, bug\u00fcn size Nginx ve Let’s Encrypt kullanarak g\u00fcvenli bir ters proxy nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m g\u00f6sterece\u011fim. Bu, web uygulamalar\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde korumak ve performanslar\u0131n\u0131 art\u0131rmak i\u00e7in harika bir y\u00f6ntemdir. \u00d6ncelikle, ters proxy’nin ne oldu\u011funu ve neden kullan\u0131lmas\u0131 gerekti\u011fini k\u0131saca a\u00e7\u0131klayal\u0131m.<\/p>\n

Ters proxy<\/strong>, kullan\u0131c\u0131 isteklerini hedef sunucuya y\u00f6nlendiren bir ara sunucudur. Bu, web uygulaman\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rmak, y\u00fck dengelemesi yapmak ve performans\u0131 iyile\u015ftirmek i\u00e7in kullan\u0131l\u0131r. Let’s Encrypt ise \u00fccretsiz ve otomatik SSL sertifikalar\u0131 sa\u011flayan bir yetkilidir. Bu sayede, web uygulaman\u0131z HTTPS \u00fczerinden g\u00fcvenli bir \u015fekilde eri\u015filebilir hale gelir.<\/p>\n

Ad\u0131m 1: Nginx Kurulumu<\/h2>\n

\u0130lk ad\u0131m olarak, sunucunuzda Nginx’i kurman\u0131z gerekmektedir. Bu i\u015flemin nas\u0131l yap\u0131laca\u011f\u0131 i\u015fletim sisteminize g\u00f6re de\u011fi\u015fir. \u00d6rne\u011fin, Ubuntu\/Debian sistemlerinde a\u015fa\u011f\u0131daki komutu kullanabilirsiniz:<\/p>\n

sudo apt update\nsudo apt install nginx\n<\/code><\/pre>\n
Kurulum tamamland\u0131ktan sonra, Nginx’i ba\u015flatman\u0131z ve otomatik ba\u015flatmay\u0131 etkinle\u015ftirmeniz gerekir:<\/p>\n
sudo systemctl start nginx\nsudo systemctl enable nginx\n<\/code><\/pre>\n
Ad\u0131m 2: Let’s Encrypt ile SSL Sertifikas\u0131 Alma<\/h2>\n
\u015eimdi, Let’s Encrypt’ten \u00fccretsiz bir SSL sertifikas\u0131 almal\u0131y\u0131z.  Bunun i\u00e7in Certbot arac\u0131n\u0131 kullanaca\u011f\u0131z.  \u00d6ncelikle Certbot’u kurun:<\/p>\n
sudo apt update\nsudo apt install certbot python3-certbot-nginx\n<\/code><\/pre>\n
Ard\u0131ndan, a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131rarak sertifika alma i\u015flemini ba\u015flat\u0131n.  Bu komut, Nginx ile entegre olarak \u00e7al\u0131\u015f\u0131r ve konfig\u00fcrasyon dosyalar\u0131n\u0131 otomatik olarak g\u00fcnceller:<\/p>\n
sudo certbot --nginx -d sizin-alan-ad\u0131n\u0131z.com\n<\/code><\/pre>\n
“sizin-alan-ad\u0131n\u0131z.com”<\/em> k\u0131sm\u0131n\u0131 kendi alan ad\u0131n\u0131zla de\u011fi\u015ftirin.  \u0130\u015flem s\u0131ras\u0131nda baz\u0131 sorular sorulacakt\u0131r.  Talimatlar\u0131 takip ederek devam edin.<\/p>\n
Ad\u0131m 3: Nginx Ters Proxy Konfig\u00fcrasyonu<\/h2>\n
Let’s Encrypt sertifikan\u0131z\u0131 ald\u0131ktan sonra, Nginx konfig\u00fcrasyonunu ters proxy olarak ayarlamal\u0131s\u0131n\u0131z.  Bu,  Nginx’in istekleri hedef sunucunuza y\u00f6nlendirmesini sa\u011flar.  \u00d6rne\u011fin, a\u015fa\u011f\u0131daki konfig\u00fcrasyon,  example.com<\/code> alan ad\u0131n\u0131 192.168.1.100:8080<\/code> adresindeki sunucuya y\u00f6nlendirir:<\/p>\n
\nserver {\n    listen 443 ssl;\n    listen [::]:443 ssl;\n    server_name example.com www.example.com;\n\n    ssl_certificate \/etc\/letsencrypt\/live\/example.com\/fullchain.pem;\n    ssl_certificate_key \/etc\/letsencrypt\/live\/example.com\/privkey.pem;\n\n    location \/ {\n        proxy_pass http:\/\/192.168.1.100:8080;\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n    }\n}\n<\/code><\/pre>\n
Bu konfigurasyonu  \/etc\/nginx\/sites-available\/example.com<\/code> gibi bir dosyaya kaydedin ve  \/etc\/nginx\/sites-enabled\/<\/code> dizinine sembolik link olu\u015fturun. Sonras\u0131nda Nginx’i yeniden ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart nginx\n<\/code><\/pre>\n
Konfigurasyonunuzu dikkatlice inceleyin ve sunucunuzun IP adresini ve portunu do\u011fru \u015fekilde ayarlad\u0131\u011f\u0131n\u0131zdan emin olun.  Ayr\u0131ca,  proxy_pass<\/code> direktifi sonras\u0131 bulunan hedef sunucunuzun \u00e7al\u0131\u015f\u0131r durumda oldu\u011fundan emin olun.<\/p>\n
Ad\u0131m 4: G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h2>\n
G\u00fcvenli\u011fi sa\u011flamak i\u00e7in a\u015fa\u011f\u0131daki ipu\u00e7lar\u0131n\u0131 da g\u00f6z \u00f6n\u00fcnde bulundurmal\u0131s\u0131n\u0131z:<\/p>\n