mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2024-09-20 10:41:47 +02:00
f5ee7a08f5
For proxy/fastcgi/uwsgi blocks, logging is still set to the old format, but for everything else (= static data) a reduced format is used that excludes items that no longer make sense (request_time, remote_user) and those that are personal information all the time (remote_addr, http_x_forwarded_for). Signed-off-by: Florian Pritz <bluewind@xinu.at>
44 lines
1.2 KiB
Django/Jinja
44 lines
1.2 KiB
Django/Jinja
upstream patchwork {
|
|
server unix:///run/uwsgi/patchwork.sock;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name {{ patchwork_domain }};
|
|
|
|
access_log /var/log/nginx/{{ patchwork_domain }}/access.log reduced;
|
|
error_log /var/log/nginx/{{ patchwork_domain }}/error.log;
|
|
|
|
include snippets/letsencrypt.conf;
|
|
|
|
location / {
|
|
access_log off;
|
|
rewrite ^(.*) https://{{ patchwork_domain }}$1 permanent;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
server_name {{ patchwork_domain }};
|
|
|
|
access_log /var/log/nginx/{{ patchwork_domain }}/access.log reduced;
|
|
error_log /var/log/nginx/{{ patchwork_domain }}/error.log;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/{{ patchwork_domain }}/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/{{ patchwork_domain }}/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/{{ patchwork_domain }}/chain.pem;
|
|
|
|
location /static {
|
|
alias {{ patchwork_dir }}/htdocs/static;
|
|
}
|
|
|
|
location / {
|
|
access_log /var/log/nginx/{{ patchwork_domain }}/access.log main;
|
|
include uwsgi_params;
|
|
uwsgi_pass patchwork;
|
|
}
|
|
|
|
}
|