nhcarrigan/nginx-configs
2
0
Fork 0
generated from nhcarrigan/template
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update configs

Browse Source
This commit is contained in:
Naomi Carrigan 2025-02-13 17:50:10 -08:00
parent 600cc2b8e3
commit 78c0210284
Signed by: naomi
SSH Key Fingerprint: SHA256:rca1iUI2OhAM6n4FIUaFcZcicmri0jgocqKiTTAfrt8
6 changed files with 85 additions and 57 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
configs/matrix.conf
View File

@ -5,6 +5,13 @@ server {
ssl_certificate /etc/letsencrypt/live/matrix.nhcarrigan.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/matrix.nhcarrigan.com/privkey.pem;
# Root path redirect only for port 443
location = / {
if ($server_port = 443) {
return 301 https://chat.nhcarrigan.com;
}
}
location /.well-known/matrix/server {
return 200 '{"m.server": "matrix.nhcarrigan.com:443"}';
add_header Content-Type application/json;

26
configs/prod.conf
View File

@ -1,3 +1,16 @@
server {
listen 443 ssl;
server_name alerts.nhcarrigan.com;
ssl_certificate /etc/letsencrypt/live/alerts.nhcarrigan.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/alerts.nhcarrigan.com/privkey.pem;
location / {
proxy_set_header Host $host;
proxy_pass http://127.0.0.1:5003;
proxy_redirect off;
}
}
server {
listen 443 ssl;
server_name irc-private.nhcarrigan.com;
@ -11,6 +24,19 @@ server {
}
}
server {
listen 443 ssl;
server_name assistant.nhcarrigan.com;
ssl_certificate /etc/letsencrypt/live/assistant.nhcarrigan.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/assistant.nhcarrigan.com/privkey.pem;
location / {
proxy_set_header Host $host;
proxy_pass http://127.0.0.1:5002;
proxy_redirect off;
}
}
server {
listen 443 ssl;
server_name naomi.party;

7
pull.sh Executable file
View File

@ -0,0 +1,7 @@
servers=("prod" "irc" "fedi" "matrix" "gitea")
for server in "${servers[@]}"
do
echo "Pulling $server"
rsync --archive --verbose $server:/etc/nginx/conf.d/server.conf configs/$server.conf
done

12
push.sh
View File

@ -1,12 +0,0 @@
servers=("prod" "irc" "fedi" "matrix" "gitea")
for server in "${servers[@]}"
do
echo "Pushing $server"
server_ip=$(ssh -o IdentityAgent=~/.1password/agent.sock $server "hostname -I | cut -d' ' -f1")
echo "Server IP: $server_ip"
rsync --archive -e "ssh -o IdentityAgent=~/.1password/agent.sock" configs/$server.conf root@$server_ip:/etc/nginx/conf.d/server.conf
ssh -o IdentityAgent=~/.1password/agent.sock root@$server_ip "systemctl restart nginx"
done