[Git][qa/jenkins.debian.net][master] enable https for arm64.r.d.n

[Holger Levsen (@holger)]

Holger Levsen pushed to branch master at Debian QA / jenkins.debian.net


Commits:
2266fcbf by Holger Levsen at 2025-01-21T20:33:05+01:00
enable https for arm64.r.d.n

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- hosts/osuosl5-amd64/etc/nginx/nginx.conf


Changes:

=====================================
hosts/osuosl5-amd64/etc/nginx/nginx.conf
=====================================
@@ -110,6 +110,55 @@ http {
 
     }
 
+    server {
+        server_name     arm64.reproduce.debian.net;
+        ssi on;
+        index index_arm64.html;
+        root /var/www/html;
+
+        listen 443 ssl;
+        ssl_certificate /var/lib/dehydrated/certs/arm64.reproduce.debian.net/fullchain.pem;
+        ssl_certificate_key /var/lib/dehydrated/certs/arm64.reproduce.debian.net/privkey.pem;
+
+        ssl_session_cache shared:le_nginx_SSL:10m;
+        ssl_session_timeout 1440m;
+        ssl_session_tickets off;
+        ssl_protocols TLSv1.2 TLSv1.3;
+        ssl_prefer_server_ciphers off;
+        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-C
+        HACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
+
+        location /.well-known/acme-challenge/ {
+            alias /var/lib/dehydrated/acme-challenges/;
+            disable_symlinks off;
+            autoindex off;
+        }
+
+        location / {
+            # First attempt to serve request as file, then
+            # as directory, then fall back to displaying a 404.
+            try_files $uri $uri/ =404;
+        }
+
+        location /api/ {
+            proxy_set_header    X-Real-IP          $remote_addr;
+            proxy_pass http://127.0.0.1:8486;
+        }
+        location = /api/v0/build/report {
+            client_max_body_size 200M;
+            proxy_set_header    X-Real-IP          $remote_addr;
+            proxy_pass http://127.0.0.1:8486;
+        }
+
+	location /stats/ {
+            alias /srv/rebuilderd/arm64/stats/ ;
+            disable_symlinks off;
+            autoindex on;
+            index index.html;
+        }
+
+    }
+
     server {
         server_name     reproduce.debian.net;
         ssi on;



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/2266fcbf385dd1c315f55a2f42f68cd8cd0aa0e4

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/2266fcbf385dd1c315f55a2f42f68cd8cd0aa0e4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20250121/2a552c8e/attachment-0001.htm>