add cgit.zone

1 files changed, 21 insertions, 13 deletions

diff --git a/nginx.conf b/nginx.conf
index 88cf290..ac20e4a 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -134,6 +134,27 @@ http {
 	}
 
 	server {
+		listen 51.222.150.227:443 ssl;
+		listen [2607:5300:401:2c01::c0de]:443 ssl;
+		server_name ~^(?<user>[^.-]+)(-(?<repo>[^.]+))\.cgit\.zone$;
+
+		ssl_certificate /etc/letsencrypt/live/cgit.zone/fullchain.pem;
+		ssl_certificate_key /etc/letsencrypt/live/cgit.zone/privkey.pem;
+
+		root /home/$user/$repo.git/webroot/;
+
+		http2 on;
+
+		location /.well-known/ {
+			root /var/www/localhost/htdocs;
+		}
+
+		if (!-d /home/$user/$repo.git/webroot/) {
+			return 502;
+		}
+	}
+
+	server {
 		listen 51.222.150.227:444 ssl default_server;
 		listen [2607:5300:401:2c01::c0de]:444 ssl default_server;
 		server_name cgit.space;
@@ -163,17 +184,4 @@ http {
 
 		include server.conf;
 	}
-
-#	server {
-#		listen unix:/var/run/tor/dn42.sock;
-#		server_name dn422hid5ejv7p67nw3nvn3uoqhxrr57hsagg2yxwsn72vuxwgi5veyd.onion;
-#
-#		location / {
-#			proxy_pass https://dn42.wiki;
-#			proxy_set_header Host dn42.wiki;
-#			proxy_set_header X-Real-IP $remote_addr;
-#			proxy_ssl_server_name on;
-#			#proxy_set_header X-Forwarded-For $remote_addr;
-#		}
-#	}
 }