diff options
Diffstat (limited to 'roles/live')
-rw-r--r-- | roles/live/tasks/main.yml | 23 | ||||
-rw-r--r-- | roles/live/templates/live.emacsconf.org.conf | 41 |
2 files changed, 64 insertions, 0 deletions
diff --git a/roles/live/tasks/main.yml b/roles/live/tasks/main.yml new file mode 100644 index 0000000..3e51765 --- /dev/null +++ b/roles/live/tasks/main.yml @@ -0,0 +1,23 @@ +- name: Create the directory for this year + file: + path: /var/www/live.emacsconf.org/{{ item }} + owner: "{{ emacsconf_user }}" + group: "{{ emacsconf_user }}" + state: directory + loop: + - "{{ emacsconf_year }}" + - "{{ emacsconf_year }}/watch" +- name: Configure Nginx + template: + src: live.emacsconf.org.conf + dest: /etc/nginx/sites-available/live.emacsconf.org +- name: Make sure main configuration is enabled + file: + src: /etc/nginx/sites-available/live.emacsconf.org + dest: /etc/nginx/sites-enabled/live.emacsconf.org + force: no + state: link +- name: Reload configuration + service: + name: nginx + state: reloaded diff --git a/roles/live/templates/live.emacsconf.org.conf b/roles/live/templates/live.emacsconf.org.conf new file mode 100644 index 0000000..c73b202 --- /dev/null +++ b/roles/live/templates/live.emacsconf.org.conf @@ -0,0 +1,41 @@ +# {{ ansible_managed }} + +server { + listen 80; + listen [::]:80; + server_name live.emacsconf.org; + + include snippets/well-known-acme-challenge.conf; + + root /var/www/live.emacsconf.org; + add_header Cache-Control "no-store, no-cache, must-revalidate"; + add_header Pragma "no-cache"; + add_header Expires 0; +} + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name live.emacsconf.org; + + include /etc/nginx/tls/emacsconf.org.conf; + location ~ ^/$ { + return 307 https://live.emacsconf.org/{{ emacsconf_year }}/watch/index.html; + } + + #auth_basic "Restricted"; + #auth_basic_user_file "znc-htpasswd"; + + root /var/www/live.emacsconf.org; + add_header Cache-Control "no-store, no-cache, must-revalidate"; + add_header Pragma "no-cache"; + add_header Expires 0; +} + +server { + listen 80; + listen [::]:80; + server_name live.emacsconf.com live.emacsconf.net; + + return 302 $scheme://live.emacsconf.org$request_uri; +} |