2023-07-29 14:30:46 +02:00

33 lines
791 B
Ruby

#
# Cookbook Name:: kosmos_garage
# Recipe:: nginx_web
#
file "#{node['openresty']['dir']}/conf.d/garage.conf" do
content <<-EOF
upstream garage_web {
server localhost:3902;
}
proxy_cache_path #{node['openresty']['cache_dir']}/garage
levels=1:2 keys_zone=garage_cache:10m
max_size=1g inactive=60m use_temp_path=off;
EOF
end
domains = node['garage']['s3_web_domains']
domains.each do |server_name|
tls_cert_for server_name do
auth "gandi_dns"
action :create
end
openresty_site server_name do
template "nginx_conf_web.erb"
variables server_name: server_name,
ssl_cert: "/etc/letsencrypt/live/#{server_name}/fullchain.pem",
ssl_key: "/etc/letsencrypt/live/#{server_name}/privkey.pem"
end
end