update uploadHEADmain

1 files changed, 46 insertions, 0 deletions

diff --git a/roles/upload/templates/nginx-site-config b/roles/upload/templates/nginx-site-config
new file mode 100644
index 0000000..48842d1
--- /dev/null
+++ b/roles/upload/templates/nginx-site-config
@@ -0,0 +1,46 @@
+upstream upload_emacsconf {
+        server 127.0.0.1:3000;
+}
+
+server {
+        listen 80;
+        listen [::]:80;
+        server_name {{ upload_server_name }};
+
+        include snippets/well-known-acme-challenge.conf;
+
+        location / {
+                return 302 https://$server_name$request_uri;
+        }
+}
+
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+        server_name {{ upload_server_name }};
+
+        ssl_certificate /var/local/dehydrated/certs/{{ upload_server_name }}/fullchain.pem;
+        ssl_certificate_key /var/local/dehydrated/certs/{{ upload_server_name }}/privkey.pem;
+        ssl_trusted_certificate /var/local/dehydrated/certs/{{ upload_server_name }}/fullchain.pem;
+        include ssl_params.local;
+        include snippets/well-known-acme-challenge.conf;
+{% if upload_enabled %}
+  			location @upload_emacsconf {
+    		proxy_pass http://upload_emacsconf;
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_request_buffering off;      # needs nginx version >= 1.7.11
+    proxy_set_header Host $http_host;
+  }
+  location / {
+    #try_files $uri $uri/ @upload_emacsconf;
+    proxy_pass http://upload_emacsconf;
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_request_buffering off;      # needs nginx version >= 1.7.11
+    proxy_set_header Host $http_host;
+  }
+	{% else %}
+	root {{ upload_done_dir }};
+	{% endif %}
+}