aboutsummaryrefslogtreecommitdiffstats
path: root/snippets/nginx.conf
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2017-07-08 21:04:17 +0200
committerGuilhem Moulin <guilhem@fripost.org>2017-07-08 21:04:17 +0200
commit9c113558ea6dc75850d67d93e7567abb5fbd5dc6 (patch)
treed91ebf14c189fa24b7565e90197db2df6a145236 /snippets/nginx.conf
parentc1b8ab65eb0e7f1cf94f45c9bd56ce05f3a66fb2 (diff)
parent8cdd29841d0dbb89e866aad36173bb26182d0c97 (diff)
Merge branch 'master' into debian
Diffstat (limited to 'snippets/nginx.conf')
-rw-r--r--snippets/nginx.conf18
1 files changed, 18 insertions, 0 deletions
diff --git a/snippets/nginx.conf b/snippets/nginx.conf
new file mode 100644
index 0000000..981bdc3
--- /dev/null
+++ b/snippets/nginx.conf
@@ -0,0 +1,18 @@
+# Use Nginx to serve ACME requests; either directly, or by passing them
+# over to a locally-bound lacme webserver component.
+#
+# This file needs to be sourced to the server directives (at least the
+# non-ssl one) of each virtual host requiring authorization.
+
+location ^~ /.well-known/acme-challenge/ {
+ # Pass ACME requests to lacme's webserver component
+ proxy_pass http://unix:/var/run/lacme-www.socket;
+
+ ## Alternatively, you can let nginx serve the requests by
+ ## setting 'challenge-directory' to '/var/www/acme-challenge' in
+ ## lacme's configuration file
+ # alias /var/www/acme-challenge/;
+ # default_type application/jose+json;
+ # disable_symlinks on from=$document_root;
+ # autoindex off;
+}