Add SSL config for htwtxt server.

[config] / systemfiles / nginx.conf

diff --git a/systemfiles/nginx.conf b/systemfiles/nginx.conf
index 98626de2ed962d5da8fe8080ede3193a3c25388b..0c1efe317218698071baf42ce7bb46767bffcaca 100644 (file)
--- a/systemfiles/nginx.conf
+++ b/systemfiles/nginx.conf
@@ -23,19 +23,37 @@ http {
        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;
 
-        # IRC logs server
+        # enforce https
         server {
-                location / {
-                        auth_basic "IRC logs";
+                listen 80;
+                return 301 https://$host$request_uri;
+        }
+
+        # IRC logs
+        server {
+                listen 443 ssl;
+                server_name dump.plomlompom.com;
+                ssl_certificate /etc/letsencrypt/live/dump.plomlompom.com/fullchain.pem;
+                ssl_certificate_key /etc/letsencrypt/live/dump.plomlompom.com/privkey.pem;
+                root /var/www/html/;
+                location /irclogs/zrolaps/ {
+                        auth_basic "#zrolaps logs";
                         auth_basic_user_file /var/www/password_irclogs_zrolaps;
                         autoindex on;
-                        root /var/www/irclogs_zrolaps/;
+                }
+                location /irclogs/nodrama.de/ {
+                        auth_basic "#nodrama.de logs";
+                        auth_basic_user_file /var/www/password_irclogs_nodrama_de;
+                        autoindex on;
                 }
         }
 
         # htwtxt
         server {
+                listen 443 ssl;
                 server_name htwtxt.plomlompom.com;
+                ssl_certificate /etc/letsencrypt/live/htwtxt.plomlompom.com/fullchain.pem;
+                ssl_certificate_key /etc/letsencrypt/live/htwtxt.plomlompom.com/privkey.pem;
                 location / {
                         proxy_pass http://127.0.0.1:8000;
                 }