branch master updated: hydra: bayfront: Add HTTPS server config for 10years.guix.

[Ludovic Courtès]

This is an automated email from the git hooks/post-receive script.

civodul pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new e1b64ab  hydra: bayfront: Add HTTPS server config for 10years.guix.
e1b64ab is described below

commit e1b64ab29d110b23190187b119c4876cfe497d87
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Mon Jun 6 15:35:40 2022 +0200

    hydra: bayfront: Add HTTPS server config for 10years.guix.
    
    * hydra/bayfront.scm (%ten-years-of-guix-nginx-servers): Add TLS server
    configuration.
---
 hydra/bayfront.scm | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 848372c..aa2e9a4 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -417,7 +417,6 @@ access_log   /var/log/nginx/guix-hpc.access.log;"))
       (locations common-locations)))))
 
 (define %ten-years-of-guix-nginx-servers
-  ;; TODO: Add HTTPS.
   (list (nginx-server-configuration
          (server-name '("10years.guix.gnu.org"))
          (listen '("80" "[::]:80"))
@@ -431,7 +430,17 @@ add_header X-Frame-Options SAMEORIGIN;"))
          (locations
           (list (nginx-location-configuration     ;for use by Certbot
                  (uri "/.well-known")
-                 (body '("root /var/www;"))))))))
+                 (body '("root /var/www;"))))))
+
+        (nginx-server-configuration
+         (server-name '("10years.guix.gnu.org"))
+         (listen '("443 ssl" "[::]:443 ssl"))
+         (ssl-certificate 
"/etc/letsencrypt/live/10years.guix.gnu.org/fullchain.pem")
+         (ssl-certificate-key 
"/etc/letsencrypt/live/10years.guix.gnu.org/privkey.pem")
+         (root "/srv/ten-years-of-guix")
+         (raw-content
+          (list %common-tls-options
+                "access_log /var/log/nginx/ten-years.access.log;")))))
 
 (define %logs.guix.gnu.org-nginx-servers
   (let ((common-locations