abf.conf

upstream puma_server {
    server unix:/app/rosa-build/rosa_build.sock fail_timeout=0;
}

server {
    listen 80;
    server_name abf.openmandriva.org;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    server_name abf.openmandriva.org;

    root /app/rosa-build/public;
    try_files $uri @puma_server;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
    ssl_certificate /etc/nginx/abf.openmandriva.org-chain.pem;
    ssl_certificate_key /etc/nginx/abf.openmandriva.org.key;
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8;

  location @puma_server {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-Proto https; # if use ssl
    proxy_redirect off;
    proxy_pass http://puma_server;
  }

  location /.well-known/acme-challenge/ {
      alias /letsencrypt/;
      try_files $uri =404;
      default_type "text/plain";
  }

  location ~ ^/(assets)/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
    add_header Last-Modified "";
    add_header ETag "";

    open_file_cache max=1000 inactive=500s;
    open_file_cache_valid 600s;
    open_file_cache_errors on;
    break;
  }
}

server {
    listen 443 ssl http2;
    server_name abf-static.openmandriva.org;

    root /app/rosa-build/public;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_certificate /etc/nginx/abf.openmandriva.org-chain.pem;
    ssl_certificate_key /etc/nginx/abf.openmandriva.org.key;
    ssl_trusted_certificate /etc/nginx/abf.openmandriva.org.crt;
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8;

  location ~ ^/(assets)/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
    add_header Last-Modified "";
    add_header ETag "";

    open_file_cache max=1000 inactive=500s;
    open_file_cache_valid 600s;
    open_file_cache_errors on;
    break;
  }

  location /massbuild {
    alias /massbuild/;
    index massbuild.html index.htm;
  }
}

server {
    listen  80;
    server_name *.lindev.ch *.bero.eu;
    location / {
        proxy_pass http://10.39.94.6;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 443;
    server_name *.lindev.ch *.bero.eu;
    location / {
        proxy_pass https://10.39.94.6;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}