[Git][qa/jenkins.debian.net][master] reproducible Debian: add certbot config for nginx

Holger Levsen (@holger) gitlab at salsa.debian.org
Mon Dec 11 09:26:00 GMT 2023



Holger Levsen pushed to branch master at Debian QA / jenkins.debian.net


Commits:
fa5d8753 by Holger Levsen at 2023-12-11T10:21:45+01:00
reproducible Debian: add certbot config for nginx

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- hosts/osuosl5-amd64/etc/nginx/nginx.conf


Changes:

=====================================
hosts/osuosl5-amd64/etc/nginx/nginx.conf
=====================================
@@ -13,7 +13,6 @@ http {
     server_tokens       off;
 
     server {
-        listen          80;
         server_name     rebuilder-snapshot.debian.net;
 
         location 		/ {
@@ -37,5 +36,25 @@ http {
         }
 
 
-    }
+    
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/rebuilder-snapshot.debian.net/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/rebuilder-snapshot.debian.net/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
+
+
+    server {
+    if ($host = rebuilder-snapshot.debian.net) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+        listen          80;
+        server_name     rebuilder-snapshot.debian.net;
+    return 404; # managed by Certbot
+
+
+}}



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/fa5d87536e4b9cb4793b8c546e24d3cc56980e8a

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/fa5d87536e4b9cb4793b8c546e24d3cc56980e8a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20231211/9f2a0bd7/attachment-0001.htm>


More information about the Qa-jenkins-scm mailing list