2023-07-26 16:42:48 +02:00

32 lines
744 B
Ruby

#
# Cookbook Name:: kosmos_garage
# Recipe:: nginx_web
#
file "/etc/openresty/conf.d/garage.conf" do
content <<-EOF
upstream garage_web {
server localhost:3902;
}
proxy_cache_path /var/cache/nginx/garage levels=1:2 keys_zone=garage_cache:10m
max_size=1g inactive=60m use_temp_path=off;
EOF
end
domains = node['garage']['s3_web_domains']
domains.each do |server_name|
tls_cert_for server_name do
auth "gandi_dns"
action :create
end
openresty_site server_name do
template "nginx_conf_web.erb"
variables server_name: server_name,
ssl_cert: "/etc/letsencrypt/live/#{server_name}/fullchain.pem",
ssl_key: "/etc/letsencrypt/live/#{server_name}/privkey.pem"
end
end