From 1f9e3ed871c7365ca1cec24b503473ed5df6234f Mon Sep 17 00:00:00 2001
From: Sacha Chua <sacha@sachachua.com>
Date: Sun, 10 May 2026 15:07:02 -0400
Subject: create 404 page

---
 roles/media/tasks/main.yml              | 10 ++++++++++
 roles/media/templates/nginx-site-config | 16 +++++++++++++---
 2 files changed, 23 insertions(+), 3 deletions(-)

diff --git a/roles/media/tasks/main.yml b/roles/media/tasks/main.yml
index e9daaef..94f10a3 100644
--- a/roles/media/tasks/main.yml
+++ b/roles/media/tasks/main.yml
@@ -49,11 +49,21 @@
   template:
     src: nginx-include
     dest: /etc/nginx/sites-available/{{ media_server_name }}-{{ emacsconf_year }}-include
+- name: Create 404 page
+  template:
+    src: 404.html
+    dest: /var/www/{{ media_server_name }}/404.html
+
 - name: Create main configuration if needed
   template:
     src: nginx-site-config
     dest: /etc/nginx/sites-available/{{ media_server_name }}
     force: no
+- name: Make sure 404 line is in main config
+  lineinfile:
+    line: error_page 404 403 /404.html;
+    dest: /etc/nginx/sites-available/{{ media_server_name }}
+    insertafter: "listen 443 ssl http2;"
 - name: Make sure main configuration is enabled
   file:
     src: /etc/nginx/sites-available/{{ media_server_name }}
diff --git a/roles/media/templates/nginx-site-config b/roles/media/templates/nginx-site-config
index ba25cba..f6a83b1 100644
--- a/roles/media/templates/nginx-site-config
+++ b/roles/media/templates/nginx-site-config
@@ -1,7 +1,17 @@
 server {
-   listen 80;
-   server_name {{ media_server_name }};
-   root /var/www/{{ media_server_name }};
+    listen 80;
+    server_name {{ media_server_name }};
+    root /var/www/{{ media_server_name }};
+    error_page 404 403 /404.html;
+    location / {
+        add_header Cache-Control "no-store, no-cache, must-revalidate";
+        add_header Pragma "no-cache";
+        expires 0;
+    }
+    types {
+        text/plain org;
+    }
+
     location ~* \.vtt$ {
         add_header Cache-Control "no-cache, no-store, must-revalidate";
         add_header Pragma "no-cache";
-- 
cgit v1.2.3