chore: update configs

configs/irc.conf

@@ -24,7 +24,7 @@ server {
 	try_files $uri $uri/ =404;
     }
  
-    location ~ \.php$ {
+location ~ \.php$ {
         include snippets/fastcgi-php.conf;
         fastcgi_pass unix:/run/php/php8.3-fpm.sock;
     }

configs/matrix.conf

@@ -5,6 +5,13 @@ server {
     ssl_certificate /etc/letsencrypt/live/matrix.nhcarrigan.com/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/matrix.nhcarrigan.com/privkey.pem;
 
+    # Root path redirect only for port 443
+    location = / {
+        if ($server_port = 443) {
+            return 301 https://chat.nhcarrigan.com;
+        }
+    }
+
     location /.well-known/matrix/server {
 	return 200 '{"m.server": "matrix.nhcarrigan.com:443"}';
 	add_header Content-Type application/json;

configs/prod.conf

@@ -1,3 +1,16 @@
+server {
+  listen 443 ssl;
+  server_name alerts.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/alerts.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/alerts.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:5003;
+    proxy_redirect off;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name irc-private.nhcarrigan.com;
@@ -11,6 +24,19 @@ server {
     }
 }
 
+server {
+  listen 443 ssl;
+  server_name assistant.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/assistant.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/assistant.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:5002;
+    proxy_redirect off;
+  }
+}
+
 server {
     listen 443 ssl;
     server_name naomi.party;

pull.sh

@@ -0,0 +1,7 @@
+servers=("prod" "irc" "fedi" "matrix" "gitea")
+
+for server in "${servers[@]}"
+do
+    echo "Pulling $server"
+    rsync --archive --verbose $server:/etc/nginx/conf.d/server.conf configs/$server.conf
+done

push.sh

@@ -1,12 +0,0 @@
-servers=("prod" "irc" "fedi" "matrix" "gitea")
-
-for server in "${servers[@]}"
-do
-    echo "Pushing $server"
-    server_ip=$(ssh -o IdentityAgent=~/.1password/agent.sock $server "hostname -I | cut -d' ' -f1")
-    echo "Server IP: $server_ip"
-    
-    rsync --archive -e "ssh -o IdentityAgent=~/.1password/agent.sock" configs/$server.conf root@$server_ip:/etc/nginx/conf.d/server.conf
-    
-    ssh -o IdentityAgent=~/.1password/agent.sock root@$server_ip "systemctl restart nginx"
-done