From 9368dfb7373619cff64c95a70ac1ed9646a189f9 Mon Sep 17 00:00:00 2001
From: Patrick Spek <p.spek@tyil.nl>
Date: Fri, 30 Dec 2022 00:22:33 +0100
Subject: Add ntfy.tyil.nl to nginx

---
 .../share/sites.d/http/nl.tyil.ntfy                | 13 +++++++++
 .../share/sites.d/https/nl.tyil.ntfy               | 32 ++++++++++++++++++++++
 2 files changed, 45 insertions(+)
 create mode 100644 playbooks.d/webserver-nginx/share/sites.d/http/nl.tyil.ntfy
 create mode 100644 playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.ntfy

diff --git a/playbooks.d/webserver-nginx/share/sites.d/http/nl.tyil.ntfy b/playbooks.d/webserver-nginx/share/sites.d/http/nl.tyil.ntfy
new file mode 100644
index 0000000..d4b8d44
--- /dev/null
+++ b/playbooks.d/webserver-nginx/share/sites.d/http/nl.tyil.ntfy
@@ -0,0 +1,13 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name ntfy.tyil.nl;
+
+	include /etc/nginx/snippets.d/certbot.conf;
+	include /etc/nginx/snippets.d/headers.conf;
+
+	location / {
+		return 301 https://$host$request_uri;
+	}
+}
diff --git a/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.ntfy b/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.ntfy
new file mode 100644
index 0000000..288971f
--- /dev/null
+++ b/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.ntfy
@@ -0,0 +1,32 @@
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+
+	server_name ntfy.tyil.nl;
+
+	ssl_certificate /etc/letsencrypt/live/ntfy.tyil.nl/fullchain.pem;
+	ssl_certificate_key /etc/letsencrypt/live/ntfy.tyil.nl/privkey.pem;
+
+	include /etc/nginx/snippets.d/certbot.conf;
+	include /etc/nginx/snippets.d/headers.conf;
+	include /etc/nginx/snippets.d/ssl.conf;
+
+	location / {
+		proxy_buffering         off;
+		proxy_connect_timeout   3m;
+		proxy_http_version      1.1;
+		proxy_read_timeout      3m;
+		proxy_redirect          off;
+		proxy_request_buffering off;
+		proxy_send_timeout      3m;
+
+		proxy_set_header Connection      $http_connection;
+		proxy_set_header Host            $host;
+		proxy_set_header Upgrade         $http_upgrade;
+		proxy_set_header X-Forwarded-For $remote_addr;
+
+		client_max_body_size 20m;
+
+		proxy_pass http://127.0.0.1:42349;
+	}
+}
-- 
cgit v1.1