X-Git-Url: https://plomlompom.com/repos/?a=blobdiff_plain;f=bullseye%2Fetc_files%2Fwebsite%2Fetc%2Fnginx%2Fsites-available%2Fwebsite.nginx;fp=bullseye%2Fetc_files%2Fwebsite%2Fetc%2Fnginx%2Fsites-available%2Fwebsite.nginx;h=cbad304d8e8060c0c69c2e4ee169b32e92757057;hb=0deff7ca381f991effd74682bffa8a5a642f260e;hp=0000000000000000000000000000000000000000;hpb=458411aa5fa8e6ca5ca7455e553b0001408aa451;p=config

diff --git a/bullseye/etc_files/website/etc/nginx/sites-available/website.nginx b/bullseye/etc_files/website/etc/nginx/sites-available/website.nginx
new file mode 100644
index 0000000..cbad304
--- /dev/null
+++ b/bullseye/etc_files/website/etc/nginx/sites-available/website.nginx
@@ -0,0 +1,40 @@
+server {
+    listen 443 ssl;
+    server_name REPLACE_fqdn_ECALPER;
+    ssl_certificate /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/privkey.pem;
+    root /var/www/html/;
+    index index.html index.htm index.nginx-debian.html;
+
+    # serve /var/repos/* for HTTPS git cloning
+    location ~ /repos/clone(/.*) {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend;
+        # Commented out so only repos are served that contain a
+        # git-daemon-export-ok file.
+        # fastcgi_param GIT_HTTP_EXPORT_ALL "";
+        fastcgi_param GIT_PROJECT_ROOT /var/repos;
+        fastcgi_param PATH_INFO $1;
+        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    }
+
+    # gitweb static files
+    location /repos/static/ {
+        alias /usr/share/gitweb/static/;
+    }
+
+    # gitweb; this needs packages fcgiwrap and gitweb
+    location /repos/ {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
+        fastcgi_param GITWEB_CONFIG /etc/gitweb.conf;
+        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    }
+
+    # login-protected IRC logs
+    location ~ ^/irclogs/([^/]+)/ {
+        auth_basic "$1 logs";
+        auth_basic_user_file /var/www/irclogs_pw/$1;
+        autoindex on;
+    }
+}