Go to file
Drew DeVault 9af0afe04a *.conf: update CSP 2023-09-14 14:13:53 +02:00
pages.sr.ht pages.sr.ht: update configuration 2021-08-05 09:35:51 +02:00
LICENSE Initial commit 2020-08-31 18:05:28 -04:00
README.md README.md: fix typo 2021-11-28 11:33:17 +01:00
builds.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
chat.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
git.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
graphql.conf web, graphql: set X-Forwarded-For properly 2021-08-30 10:36:23 +02:00
headers.conf Include common headers from separate file 2022-03-15 12:34:20 +01:00
hg.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
hub.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
lists.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
man.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
meta.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
nginx.conf all: move domains.conf => sourcehut.conf 2021-08-30 09:29:53 +02:00
paste.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
port80.conf all: refactor common config options into includes 2021-08-30 09:22:32 +02:00
port443.conf Include common headers from separate file 2022-03-15 12:34:20 +01:00
robots.txt Add new marketing bot 2023-09-01 15:20:03 +02:00
sourcehut.conf sourcehut.conf: bump python version 2023-03-22 10:18:47 +01:00
todo.sr.ht.conf *.conf: update CSP 2023-09-14 14:13:53 +02:00
web.conf web, graphql: set X-Forwarded-For properly 2021-08-30 10:36:23 +02:00

README.md

sr.ht-nginx

This is the nginx configuration files used by sr.ht in production. They are designed to run on an Alpine Linux system using the official sourcehut Alpine packages. You may use them on your own servers, but your mileage may vary. Install the -nginx package (e.g. git.sr.ht-nginx) to pull in these files, then edit /etc/nginx/domains.conf (and /etc/nginx/nginx.conf, if necessary) to suit your particular installation.

You should also write your own file, *-ssl.conf (e.g. /etc/nginx/builds-ssl.conf), which configures the SSL certificate, like so:

ssl_certificate /etc/ssl/uacme/builds.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/builds.sr.ht/key.pem;

This is annoying. You can thank the nginx devs.