diff options
| author | Marek Paśnikowski <marek@marekpasnikowski.pl> | 2024-01-14 09:51:16 +0100 |
|---|---|---|
| committer | Marek Paśnikowski <marek@marekpasnikowski.pl> | 2024-01-14 09:51:16 +0100 |
| commit | a95671ead58b4f4fdc49234b41a621306ac92778 (patch) | |
| tree | 902fbc86c2ecd311b81aa7261bee415a3b7b102c /system-configuration.scm | |
| parent | e749d673e667f5e404784ca9b61d73c933d0e895 (diff) | |
feat(nginx): configure Radicale settings
Set up the reverse proxy for radicale.marekpasnikowski.pl and listen for this
subdomain. Configure the SSL certificates to include the subdomain. Fix a
warning about wrong X-Script-name and include a link to .well-known folder in
order to fix synchronization with Sailfish OS.
Diffstat (limited to 'system-configuration.scm')
| -rw-r--r-- | system-configuration.scm | 25 |
1 files changed, 23 insertions, 2 deletions
diff --git a/system-configuration.scm b/system-configuration.scm index f5f1a7d..b30e48c 100644 --- a/system-configuration.scm +++ b/system-configuration.scm @@ -543,7 +543,8 @@ ( domains ( list "marekpasnikowski.pl" - "git.marekpasnikowski.pl" ) ) ) ) ) + "git.marekpasnikowski.pl" + "radicale.marekpasnikowski.pl" ) ) ) ) ) ( email certbot-mail ) ( webroot "/srv/www/marek/marekpasnikowski.pl" ) ) ) ( service cgit-service-type @@ -588,6 +589,7 @@ ( nginx-configuration ( server-blocks ( list + ;; Top-Level ( nginx-server-configuration ( locations ( list @@ -601,7 +603,26 @@ ( ssl-certificate "/etc/letsencrypt/live/marekpasnikowski.pl/fullchain.pem" ) ( ssl-certificate-key - "/etc/letsencrypt/live/marekpasnikowski.pl/privkey.pem" ) ) ) ) ) ) + "/etc/letsencrypt/live/marekpasnikowski.pl/privkey.pem" ) ) + ;; Radicale + ( nginx-server-configuration + ( locations + ( list + ( nginx-location-configuration + ( body + ( list + "proxy_pass http://localhost:5232/ ;" + "proxy_set_header X-Script-Name \"\" ;" + "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ;" + "proxy_set_header Host $http_host ;" + "proxy_pass_header Authorization ;" ) ) + ( uri "/" ) ) + ( nginx-location-configuration + ( body + ( list "root /srv/www/marek/marekpasnikowski.pl ;" ) ) + ( uri "/.well-known" ) ) ) ) + ( listen ( list "192.168.10.2:443 ssl" ) ) + ( server-name ( list "radicale.marekpasnikowski.pl" ) ) ) ) ) ) ) ( service openssh-service-type ) ( service radicale-service-type ( radicale-configuration |