From a3e084ec9c640da649dd35e991e9e5f343fcd1e2 Mon Sep 17 00:00:00 2001
From: Arun Isaac
Date: Thu, 10 Aug 2023 15:16:32 +0100
Subject: Add nginx package with the ssl_preread module.

* nginx-preread.scm, nginx-preread-deploy.sh: New files.
---
 nginx-preread-deploy.sh |  7 +++++++
 nginx-preread.scm       | 15 +++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100755 nginx-preread-deploy.sh
 create mode 100644 nginx-preread.scm

diff --git a/nginx-preread-deploy.sh b/nginx-preread-deploy.sh
new file mode 100755
index 0000000..2afa681
--- /dev/null
+++ b/nginx-preread-deploy.sh
@@ -0,0 +1,7 @@
+#! /bin/sh -e
+
+nginx=$(guix build -f nginx-preread.scm)
+
+echo $nginx
+sudo ln --no-target-directory --force --symbolic $nginx/sbin/nginx /usr/local/sbin/nginx
+sudo ln --force --symbolic /usr/local/sbin/nginx /var/guix/gcroots
diff --git a/nginx-preread.scm b/nginx-preread.scm
new file mode 100644
index 0000000..9b48024
--- /dev/null
+++ b/nginx-preread.scm
@@ -0,0 +1,15 @@
+;; nginx package that has the ssl_preread module compiled in. We use
+;; this on tux02 to pass HTTPS to containers without terminating TLS.
+
+(use-modules ((gnu packages web) #:select (nginx))
+             (guix gexp)
+             (guix packages)
+             (guix utils))
+
+(package
+  (inherit nginx)
+  (arguments
+   (substitute-keyword-arguments (package-arguments nginx)
+     ((#:configure-flags flags '())
+      #~(cons "--with-stream_ssl_preread_module"
+              #$flags)))))
-- 
cgit v1.2.3