baseline: OpenMU upstream b5a0961 (fresh source)

deploy/all-in-one/nginx/nginx.dev.conf

@@ -0,0 +1,26 @@
+events {
+}
+
+http {
+    # this is required to proxy Grafana Live WebSocket connections.
+    map $http_upgrade $connection_upgrade {
+      default upgrade;
+      '' close;
+    }
+
+  server {
+    auth_basic           "Protected Site";
+    auth_basic_user_file /etc/nginx/.htpasswd;
+
+    listen 80;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+
+    resolver 127.0.0.11 ipv6=off;
+
+    location / {
+       proxy_pass http://openmu-startup:8080;
+    }
+  }
+}

deploy/all-in-one/nginx/nginx.prod443.conf

@@ -0,0 +1,32 @@
+events {
+}
+
+http {
+    # this is required to proxy Grafana Live WebSocket connections.
+    map $http_upgrade $connection_upgrade {
+      default upgrade;
+      '' close;
+    }
+
+    server {
+        listen 443 default_server ssl http2;
+        listen [::]:443 ssl http2;
+
+        include conf.d/nginx.server_name.conf;
+        include conf.d/nginx.prod.certificates.conf;
+
+        auth_basic           "Protected Site";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+
+        listen 80;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        resolver 127.0.0.11 ipv6=off;
+
+        location / {
+           proxy_pass http://openmu-startup:8080;
+        }
+    }
+}

deploy/all-in-one/nginx/nginx.prod80.conf

@@ -0,0 +1,20 @@
+events {
+}
+
+http {
+    server {
+        listen 80;
+        listen [::]:80;
+
+        include conf.d/nginx.server_name.conf;
+        server_tokens off;
+
+        location /.well-known/acme-challenge/ {
+            root /var/www/certbot;
+        }
+
+        location / {
+            return 301 https://$server_name$request_uri;
+        }
+    }
+}

deploy/all-in-one/nginx/templates/nginx.prod.certificates.conf.template

@@ -0,0 +1,2 @@
+        ssl_certificate /etc/nginx/ssl/live/$DOMAIN_NAME/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/$DOMAIN_NAME/privkey.pem;

deploy/all-in-one/nginx/templates/nginx.server_name.conf.template

@@ -0,0 +1 @@
+		server_name $DOMAIN_NAME;