server { listen 443 ssl; server_name REPLACE_fqdn_ECALPER; ssl_certificate /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/privkey.pem; root /var/www/html/; index index.html index.htm index.nginx-debian.html; # serve /var/repos/* for HTTPS git cloning location ~ /repos/clone(/.*) { include fastcgi_params; fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend; # Commented out so only repos are served that contain a # git-daemon-export-ok file. # fastcgi_param GIT_HTTP_EXPORT_ALL ""; fastcgi_param GIT_PROJECT_ROOT /var/repos; fastcgi_param PATH_INFO $1; fastcgi_pass unix:/var/run/fcgiwrap.socket; } # gitweb static files location /repos/static/ { alias /usr/share/gitweb/static/; } # gitweb; this needs packages fcgiwrap and gitweb location /repos/ { include fastcgi_params; fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi; fastcgi_param GITWEB_CONFIG /etc/gitweb.conf; fastcgi_pass unix:/var/run/fcgiwrap.socket; } # login-protected IRC logs location ~ ^/irclogs/([^/]+)/ { auth_basic "$1 logs"; auth_basic_user_file /var/www/irclogs_pw/$1; autoindex on; } location /guiltcards/ { include uwsgi_params; uwsgi_pass 127.0.0.1:9000; } }