aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xnginx-preread-deploy.sh7
-rw-r--r--nginx-preread.scm15
2 files changed, 22 insertions, 0 deletions
diff --git a/nginx-preread-deploy.sh b/nginx-preread-deploy.sh
new file mode 100755
index 0000000..2afa681
--- /dev/null
+++ b/nginx-preread-deploy.sh
@@ -0,0 +1,7 @@
+#! /bin/sh -e
+
+nginx=$(guix build -f nginx-preread.scm)
+
+echo $nginx
+sudo ln --no-target-directory --force --symbolic $nginx/sbin/nginx /usr/local/sbin/nginx
+sudo ln --force --symbolic /usr/local/sbin/nginx /var/guix/gcroots
diff --git a/nginx-preread.scm b/nginx-preread.scm
new file mode 100644
index 0000000..9b48024
--- /dev/null
+++ b/nginx-preread.scm
@@ -0,0 +1,15 @@
+;; nginx package that has the ssl_preread module compiled in. We use
+;; this on tux02 to pass HTTPS to containers without terminating TLS.
+
+(use-modules ((gnu packages web) #:select (nginx))
+ (guix gexp)
+ (guix packages)
+ (guix utils))
+
+(package
+ (inherit nginx)
+ (arguments
+ (substitute-keyword-arguments (package-arguments nginx)
+ ((#:configure-flags flags '())
+ #~(cons "--with-stream_ssl_preread_module"
+ #$flags)))))