34 lines
892 B
Text
34 lines
892 B
Text
|
$HTTP["host"] == "{{var_hedgedoc_and_lighttpd_domain}}" {
|
||
|
|
server.name = "{{var_hedgedoc_and_lighttpd_domain}}"
|
||
|
|
proxy.server = (
|
||
|
|
"" => (
|
||
|
|
"" => (
|
||
|
|
"host" => "127.0.0.1",
|
||
|
|
"port" => 2400
|
||
|
|
)
|
||
|
|
)
|
||
|
|
)
|
||
|
|
proxy.header = (
|
||
|
|
"upgrade" => "enable"
|
||
|
|
)
|
||
|
|
|
||
|
|
{% if var_hedgedoc_and_lighttpd_tls_enable %}
|
||
|
|
## alle Anfragen auf Port 80
|
||
|
|
$SERVER["socket"] == ":80" {
|
||
|
|
## auf HTTPS umleiten
|
||
|
|
url.redirect = ("^/(.*)$" => "https://{{var_hedgedoc_and_lighttpd_domain}}/$1")
|
||
|
|
}
|
||
|
|
|
||
|
|
## alle Anfragen auf Port 443
|
||
|
|
$SERVER["socket"] == ":443" {
|
||
|
|
## mit dem SSL-Kram beglücken
|
||
|
|
ssl.engine = "enable"
|
||
|
|
ssl.pemfile = "/etc/ssl/certs/{{var_hedgedoc_and_lighttpd_domain}}.pem"
|
||
|
|
ssl.privkey = "/etc/ssl/keys/{{var_hedgedoc_and_lighttpd_domain}}.pem"
|
||
|
|
ssl.ca-file = "/etc/ssl/fullchains/{{var_hedgedoc_and_lighttpd_domain}}.pem"
|
||
|
|
ssl.use-sslv2 = "disable"
|
||
|
|
ssl.use-sslv3 = "disable"
|
||
|
|
}
|
||
|
|
{% endif %}
|
||
|
|
}
|