✨ starting to use terraform

2024-07-25 17:04:03 +01:00
parent 2bd11a174d
commit cda1d12883
5 changed files with 408 additions and 0 deletions
@@ -0,0 +1,57 @@
+############################################
+#       config file for ${name_site}
+############################################
+
+upstream ${name_site}_backend {
+        server ${name_service};
+        server 1.1.1.1 backup;
+    }
+
+server {
+        server_name ${name_site}.tryton.geeraert.eu www.${name_site}.tryton.geeraert.eu;
+        location / {
+                proxy_pass http://${name_site}_backend;
+                %{ if proxy_cache}
+                location ~* \.(html|css|jpg|gif|ico|js)$ {
+	                proxy_cache          cache;
+	                proxy_cache_key      $host$uri$is_args$args;
+	                proxy_cache_valid    200 301 302 30m;
+	                expires              30m;
+	                proxy_pass  http://${name_site}_backend;
+		}
+                %{ endif }
+        }
+        location /.well-known/acme-challenge/ {
+                root /var/www/certbot;
+        }
+
+                %{ if extra_value_bool}
+                        ${extra-value}
+                %{ endif }
+
+
+        %{ if http2_bool}
+        http2 on;
+        ssl_protocols TLSv1.2;
+        %{ endif }
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.${name_site}.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = ${name_site}.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.${name_site}.tryton.geeraert.eu ${name_site}.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}