index,nginx,web

in/public/nginx/configure.rst

@@ -0,0 +1,8 @@
+Configure
+=========
+
+* /etc/nginx/nginx.conf
+
+.. warning:: define headers at 1 place only
+
+.. todo:: extract from server

in/public/nginx/index.rst

@@ -0,0 +1,8 @@
+#####
+NginX
+#####
+
+.. toctree::
+
+   configure
+   serve

in/public/nginx/serve.rst

@@ -0,0 +1,65 @@
+Serve
+=====
+
+* /etc/nginx/sites-available/…
+
+::
+
+ server {
+     listen 80;
+     server_name _;
+     location "/mirrors" {
+         root "/";
+         autoindex on;
+     }
+     location "/" {
+         root "/data/http";
+         autoindex on;
+     }
+ }
+ server {
+     listen 443 ssl http2;
+     server_name "sous.domaine.tld";
+     ssl_certificate "/etc/nginx/certificates/nom.crt";
+     ssl_certificate_key "/etc/nginx/certificates/nom.key";
+     location "/static" {
+         root "/data/https";
+         default_type "text/html";
+         index "index.html";
+     }
+     location "/" {
+         proxy_pass "http://127.0.0.1:8069";
+         proxy_redirect off;
+         proxy_set_header Host $host;
+     }
+ }
+
+Certificates
+------------
+
+::
+
+ application/x-x509-ca-cert   crt der pem;
+ application/x-x509-user-cert pfx;
+
+Check client certificate
+------------------------
+
+::
+
+ location /protected {
+ ssl_client_certificate ca.crt;
+ ssl_verify_client on;
+ }
+
+Redirect http to https
+----------------------
+
+::
+
+ server {
+ listen 80 default_server;
+ listen [::]:80 default_server;
+ server_name _;
+ return 301 https://${host}${request_uri};
+ }