diff --git a/site-cookbooks/kosmos_website/attributes/default.rb b/site-cookbooks/kosmos_website/attributes/default.rb index a567811..213f9f2 100644 --- a/site-cookbooks/kosmos_website/attributes/default.rb +++ b/site-cookbooks/kosmos_website/attributes/default.rb @@ -1,3 +1,4 @@ -node.default["kosmos_website"]["domain"] = "kosmos.org" -node.default["kosmos_website"]["repo"] = "https://gitea.kosmos.org/kosmos/website.git" -node.default["kosmos_website"]["revision"] = "chore/content" +node.default["kosmos_website"]["domain"] = "kosmos.org" +node.default["kosmos_website"]["repo"] = "https://gitea.kosmos.org/kosmos/website.git" +node.default["kosmos_website"]["revision"] = "chore/content" +node.default["kosmos_website"]["accounts_url"] = "https://accounts.kosmos.org" diff --git a/site-cookbooks/kosmos_website/recipes/default.rb b/site-cookbooks/kosmos_website/recipes/default.rb index b8374c6..0e3be0c 100644 --- a/site-cookbooks/kosmos_website/recipes/default.rb +++ b/site-cookbooks/kosmos_website/recipes/default.rb @@ -23,6 +23,7 @@ end openresty_site domain do template "nginx_conf_website.erb" variables domain: domain, + accounts_url: node.default["kosmos_website"]["accounts_url"], ssl_cert: "/etc/letsencrypt/live/#{domain}/fullchain.pem", ssl_key: "/etc/letsencrypt/live/#{domain}/privkey.pem" end diff --git a/site-cookbooks/kosmos_website/templates/nginx_conf_website.erb b/site-cookbooks/kosmos_website/templates/nginx_conf_website.erb index 5ae24c1..8c548ef 100644 --- a/site-cookbooks/kosmos_website/templates/nginx_conf_website.erb +++ b/site-cookbooks/kosmos_website/templates/nginx_conf_website.erb @@ -18,8 +18,10 @@ server { ssl_certificate <%= @ssl_cert %>; ssl_certificate_key <%= @ssl_key %>; +<% if @accounts_url %> location ~ ^/.well-known/(webfinger|nostr|lnurlp|keysend) { proxy_ssl_server_name on; proxy_pass https://accounts.kosmos.org; } +<% end %> }