From 4941911e1acd1de5ac43616b5a407671fb4fd805 Mon Sep 17 00:00:00 2001 From: Florian Dold Date: Tue, 30 Oct 2018 12:28:57 +0100 Subject: nginx config for git, disable cgit for now --- guix/etc/nginx/sites-enabled/git-ssl.site | 52 ++++++------------------------- 1 file changed, 9 insertions(+), 43 deletions(-) (limited to 'guix/etc/nginx') diff --git a/guix/etc/nginx/sites-enabled/git-ssl.site b/guix/etc/nginx/sites-enabled/git-ssl.site index ae54886..ea7cf0f 100644 --- a/guix/etc/nginx/sites-enabled/git-ssl.site +++ b/guix/etc/nginx/sites-enabled/git-ssl.site @@ -1,20 +1,19 @@ server { - listen 80; - listen [::]:80; ## listen for ipv4; this line is default and implied - # listen [::]:80 default_server ipv6only=on; ## listen for ipv6 + listen 443 ssl; + listen [::]:443 ssl; ## listen for ipv4; this line is default and implied root /srv/git; - server_name git.taler.net; + server_name git.taler.net; + include conf.d/talerssl; - #rewrite ^ https://$server_name$request_uri? permanent; access_log /var/log/nginx/git.taler.net_access.log; error_log /var/log/nginx/git.taler.net_error.log notice; location ~ ^(.*?)\.git/(HEAD|info/refs|objects/.*|git-upload-pack)$ { include /etc/nginx/fastcgi_params; - fastcgi_param SCRIPT_FILENAME /run/current-system/profile/libexec/git-core/git-http-backend; - fastcgi_param GIT_PROJECT_ROOT /home/git/repositories; - fastcgi_param PATH_INFO $uri; + fastcgi_param SCRIPT_FILENAME /run/current-system/profile/libexec/git-core/git-http-backend; + fastcgi_param GIT_PROJECT_ROOT /home/git/repositories; + fastcgi_param PATH_INFO $uri; fastcgi_pass unix:/var/run/fcgiwrap.socket; } @@ -24,41 +23,8 @@ server { location / { include /etc/nginx/fastcgi_params; - fastcgi_param SCRIPT_FILENAME /run/current-system/profile/lib/cgit.cgi; - fastcgi_param PATH_INFO $uri; + fastcgi_param SCRIPT_FILENAME /run/current-system/profile/lib/cgit.cgi; + fastcgi_param PATH_INFO $uri; fastcgi_pass unix:/var/run/fcgiwrap.socket; } } - - -# server { -# listen 443 ssl; -# listen [::]:443 ssl; ## listen for ipv4; this line is default and implied -# # listen [::]:80 default_server ipv6only=on; ## listen for ipv6 - -# root /srv/git; -# server_name git.taler.net; -# include conf.d/talerssl; - -# access_log /var/log/nginx/git.taler.net_access.log; -# error_log /var/log/nginx/git.taler.net_error.log notice; - -# location ~ ^(.*?)\.git/(HEAD|info/refs|objects/.*|git-upload-pack)$ { -# include /etc/nginx/fastcgi_params; -# fastcgi_param SCRIPT_FILENAME /run/current-system/profile/libexec/git-core/git-http-backend; -# fastcgi_param GIT_PROJECT_ROOT /home/git/repositories; -# fastcgi_param PATH_INFO $uri; -# fastcgi_pass unix:/var/run/fcgiwrap.socket; -# } - -# location /cgit { -# root /var/www; -# } - -# location / { -# include /etc/nginx/fastcgi_params; -# fastcgi_param SCRIPT_FILENAME /run/current-system/profile/lib/cgit.cgi; -# fastcgi_param PATH_INFO $uri; -# fastcgi_pass unix:/var/run/fcgiwrap.socket; -# } -# } -- cgit v1.2.3