summaryrefslogtreecommitdiff
path: root/etc/nginx/sites-enabled/buildbot-ssl.site
blob: 99696df3b8c4b6361365e1ae915211f43a2c1aa3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
server {
        listen 443 ssl;
	listen   [::]:443 ssl; ## listen for ipv4; this line is default and implied
 	# 	listen   [::]:80 default_server ipv6only=on; ## listen for ipv6

	root /var/www/buildbot/;

	# Make site accessible from http://localhost/
	server_name buildbot.taler.net;
	server_name www.buildbot.taler.net;
	server_name bb.taler.net;
        include conf.d/talerssl;

        # location /api/v2/builders maps to the builder's
        # "view", so there is no need to restrict the access there.

        # This location is _usually_ targeted by POSTs in order
        # to trigger builds.
        location /api/v2/builds {
            auth_basic "Core devs restricted area";
            auth_basic_user_file "/etc/nginx/htpasswd";
	    proxy_pass http://127.0.0.1:8010;
	    proxy_redirect off;
	    proxy_set_header Host $host;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }

	location / {
	    proxy_pass http://127.0.0.1:8010;
	    proxy_redirect off;
	    proxy_set_header Host $host;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
	}

        include conf.d/favicon_robots;
}