infrastructure/roles/debuginfod/templates/nginx.d.conf.j2

server {
    listen       80;
    listen       [::]:80;
    server_name  {{ debuginfod_domain }};

    access_log   /var/log/nginx/{{ debuginfod_domain }}/access.log reduced;
    access_log   /var/log/nginx/{{ debuginfod_domain }}/access.log.json json_reduced;
    error_log    /var/log/nginx/{{ debuginfod_domain }}/error.log;

    include snippets/letsencrypt.conf;

    location / {
        access_log off;
        return 301 https://$server_name$request_uri;
    }
}

server {
    listen       443 ssl http2;
    listen       [::]:443 ssl http2;
    server_name  {{ debuginfod_domain }};

    access_log   /var/log/nginx/{{ debuginfod_domain }}/access.log reduced;
    access_log   /var/log/nginx/{{ debuginfod_domain }}/access.log.json json_reduced;
    error_log    /var/log/nginx/{{ debuginfod_domain }}/error.log;

    ssl_certificate      /etc/letsencrypt/live/{{ debuginfod_domain }}/fullchain.pem;
    ssl_certificate_key  /etc/letsencrypt/live/{{ debuginfod_domain }}/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/{{ debuginfod_domain }}/chain.pem;

    root  /srv/http/debuginfod;
    index index.html;

    location / {
        try_files $uri $uri/ @debuginfod;
    }

    location = /packages {
        default_type "text/plain";
    }

    location @debuginfod {
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_pass http://127.0.0.1:8002;

        gzip_comp_level 1;
        gzip_types application/octet-stream;
    }
}