~hristoast/mousikofidi: example/fidi-nginx.conf - sourcehut git


                                                                                
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
# HTTP server to automatically redirect to HTTPS
server {
	listen 80;
	server_name yourdomain.tld;
	access_log /opt/fidi/logs/access_log;
	error_log /opt/fidi/logs/error_log;
	return 301 https://yourdomain.tld$request_uri;
}

server {
	listen 443 ssl;
	server_name yourdomain.tld;
	ssl_certificate /etc/ssl/http/yourdomain.tld.crt;
	ssl_certificate_key /etc/ssl/http/yourdomain.tld.key;

	access_log /opt/fidi/logs/access_log;
	error_log /opt/fidi/logs/error_log;

	# Add this location block if you want to get a certificate from Let's Encrypt
	location ^~ /.well-known {
		root /opt/fidi/ssl;
	}

	# https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/
	auth_basic "Private Access Only!";
	# All login credentials are stored in this file.
	auth_basic_user_file /opt/fidi/.fidiauth;
	satisfy any;
	# Add trusted IPs as desired.
	allow 1.1.1.1;
	allow 2.2.2.2;
	deny all;

	location / {
		# This should point to the `static` directory from the code repository.
		# When pip-installed, that's found under a path like what's seen below.
		root /opt/fidi/.local/lib/python3.6/site-packages/mousikofidi/static;
		try_files $uri @fidi;
	}

	location @fidi {
		include uwsgi_params;
		# This should point to your `socket` value in `uwsgi.ini`, the user
		# running the web server will need read and write access.
		uwsgi_pass unix:/opt/fidi/tmp/mousikofidi.sock;
	}
}