Add nginx package with the ssl_preread module.

* nginx-preread.scm, nginx-preread-deploy.sh: New files.

2 files changed, 22 insertions, 0 deletions

diff --git a/nginx-preread-deploy.sh b/nginx-preread-deploy.sh
new file mode 100755
index 0000000..2afa681
--- /dev/null
+++ b/nginx-preread-deploy.sh
@@ -0,0 +1,7 @@
+#! /bin/sh -e
+
+nginx=$(guix build -f nginx-preread.scm)
+
+echo $nginx
+sudo ln --no-target-directory --force --symbolic $nginx/sbin/nginx /usr/local/sbin/nginx
+sudo ln --force --symbolic /usr/local/sbin/nginx /var/guix/gcroots
diff --git a/nginx-preread.scm b/nginx-preread.scm
new file mode 100644
index 0000000..9b48024
--- /dev/null
+++ b/nginx-preread.scm
@@ -0,0 +1,15 @@
+;; nginx package that has the ssl_preread module compiled in. We use
+;; this on tux02 to pass HTTPS to containers without terminating TLS.
+
+(use-modules ((gnu packages web) #:select (nginx))
+             (guix gexp)
+             (guix packages)
+             (guix utils))
+
+(package
+  (inherit nginx)
+  (arguments
+   (substitute-keyword-arguments (package-arguments nginx)
+     ((#:configure-flags flags '())
+      #~(cons "--with-stream_ssl_preread_module"
+              #$flags)))))