2 files changed, 53 insertions, 0 deletions
diff --git a/roles/upload/templates/index.html b/roles/upload/templates/index.html
new file mode 100644
index 0000000..e5d8e6e
--- /dev/null
+++ b/roles/upload/templates/index.html
@@ -0,0 +1,7 @@
+<html>
+        <head>
+        </head>
+        <body>
+          EmacsConf is done for now, so we've turned off the file upload service. Let us know at <a href="mailto:emacsconf-org-private@gnu.org">emacsconf-org-private@gnu.org</a> if you need it back to upload something!
+        </body>
+</html>
diff --git a/roles/upload/templates/nginx-site-config b/roles/upload/templates/nginx-site-config
new file mode 100644
index 0000000..48842d1
--- /dev/null
+++ b/roles/upload/templates/nginx-site-config
@@ -0,0 +1,46 @@
+upstream upload_emacsconf {
+        server 127.0.0.1:3000;
+}
+
+server {
+        listen 80;
+        listen [::]:80;
+        server_name {{ upload_server_name }};
+
+        include snippets/well-known-acme-challenge.conf;
+
+        location / {
+                return 302 https://$server_name$request_uri;
+        }
+}
+
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+        server_name {{ upload_server_name }};
+
+        ssl_certificate /var/local/dehydrated/certs/{{ upload_server_name }}/fullchain.pem;
+        ssl_certificate_key /var/local/dehydrated/certs/{{ upload_server_name }}/privkey.pem;
+        ssl_trusted_certificate /var/local/dehydrated/certs/{{ upload_server_name }}/fullchain.pem;
+        include ssl_params.local;
+        include snippets/well-known-acme-challenge.conf;
+{% if upload_enabled %}
+  			location @upload_emacsconf {
+    		proxy_pass http://upload_emacsconf;
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_request_buffering off;      # needs nginx version >= 1.7.11
+    proxy_set_header Host $http_host;
+  }
+  location / {
+    #try_files $uri $uri/ @upload_emacsconf;
+    proxy_pass http://upload_emacsconf;
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_request_buffering off;      # needs nginx version >= 1.7.11
+    proxy_set_header Host $http_host;
+  }
+	{% else %}
+	root {{ upload_done_dir }};
+	{% endif %}
+}