Go to file
Drew DeVault dcfe4221f8 web, graphql: set X-Forwarded-For properly 2021-08-30 10:36:23 +02:00
pages.sr.ht pages.sr.ht: update configuration 2021-08-05 09:35:51 +02:00
LICENSE Initial commit 2020-08-31 18:05:28 -04:00
README.md fuckings to nginx 2021-08-30 10:02:35 +02:00
builds.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
dispatch.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
git.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
graphql.conf web, graphql: set X-Forwarded-For properly 2021-08-30 10:36:23 +02:00
hg.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
hub.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
lists.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
man.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
meta.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
nginx.conf all: move domains.conf => sourcehut.conf 2021-08-30 09:29:53 +02:00
paste.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
port80.conf all: refactor common config options into includes 2021-08-30 09:22:32 +02:00
port443.conf all: refactor common config options into includes 2021-08-30 09:22:32 +02:00
robots.txt robots.txt: block MJ12bot 2021-04-17 08:11:34 -04:00
sourcehut.conf X-Real-IP: minor fixes 2021-08-30 09:38:02 +02:00
todo.sr.ht.conf fuckings to nginx 2021-08-30 10:02:35 +02:00
web.conf web, graphql: set X-Forwarded-For properly 2021-08-30 10:36:23 +02:00

README.md

sr.ht-nginx

This is the nginx configuration files used by sr.ht in production. They are designed to run on an Alpine Linux system using the official sourcehut Alpine packages. You may use them on your own servers, though your mileage my vary. Install the -nginx package (e.g. git.sr.ht-nginx) to pull in these files, then edit /etc/nginx/domains.conf (and /etc/nginx/nginx.conf, if necessary) to suit your particular installation.

You should also write your own file, *-ssl.conf (e.g. /etc/nginx/builds-ssl.conf), which configures the SSL certificate, like so:

ssl_certificate /etc/ssl/uacme/builds.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/builds.sr.ht/key.pem;

This is annoying. You can thank the nginx devs.