branch master updated: hydra: bayfront: Add nginx location for foundation.guix.info.

[Ludovic Courtès]

This is an automated email from the git hooks/post-receive script.

civodul pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new f4791ad  hydra: bayfront: Add nginx location for foundation.guix.info.
f4791ad is described below

commit f4791add2c1d5de7d6720a31d9b7ddf6faf7dc6d
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Sat Feb 3 18:41:46 2024 +0100

    hydra: bayfront: Add nginx location for foundation.guix.info.
    
    * hydra/bayfront.scm (%foundation-nginx-servers): New variable.
    <nginx-configuration>: Add it.
---
 hydra/bayfront.scm | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 6065b49..8773df3 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -581,6 +581,41 @@ add_header X-Frame-Options SAMEORIGIN;"))
                       %disable-last-modified-header)
                 "access_log /var/log/nginx/ten-years.access.log;")))))
 
+(define %foundation-nginx-servers
+  (list (nginx-server-configuration
+         (server-name '("foundation.guix.info"))
+         (listen '("80" "[::]:80"))
+         (raw-content
+          `(,@%disable-last-modified-header
+            "
+access_log   /var/log/nginx/foundation.access.log;
+
+# Limit embedding in HTML frames.
+add_header X-Frame-Options SAMEORIGIN;"))
+         (root "/srv/foundation-web")
+         (locations
+          (list (nginx-location-configuration     ;for use by Certbot
+                 (uri "/.well-known")
+                 (body '("root /var/www;")))
+                (nginx-location-configuration     ;improve caching
+                 (uri "/static")
+                 (body '("add_header Cache-Control max-age=21600;"))))))
+
+        (nginx-server-configuration
+         (server-name '("foundation.guix.info"))
+         (listen '("443 ssl" "[::]:443 ssl"))
+         (ssl-certificate 
"/etc/letsencrypt/live/bayfront.guix.gnu.org/fullchain.pem")
+         (ssl-certificate-key 
"/etc/letsencrypt/live/bayfront.guix.gnu.org/privkey.pem")
+         (root "/srv/foundation-web")
+         (locations
+          (list (nginx-location-configuration     ;improve caching
+                 (uri "/static")
+                 (body '("add_header Cache-Control max-age=21600;")))))
+         (raw-content
+          (list (cons %common-tls-options
+                      %disable-last-modified-header)
+                "access_log /var/log/nginx/foundation.access.log;")))))
+
 (define %logs.guix.gnu.org-nginx-servers
   (let ((common-locations
          (list
@@ -1503,6 +1538,7 @@ proxy_set_header  Via  $via;"
                        %hpc.guix.info-nginx-servers
                        %guix-hpc.bordeaux.inria.fr-nginx-servers
                        %ten-years-of-guix-nginx-servers
+                       %foundation-nginx-servers
                        %logs.guix.gnu.org-nginx-servers
                        %bayfront.guix.gnu.org-nginx-servers
                        %bordeaux.guix.gnu.org-nginx-servers