diff options
| author | Collin J. Doering | 2024-05-31 09:53:59 -0400 |
|---|---|---|
| committer | Collin J. Doering | 2024-05-31 09:53:59 -0400 |
| commit | 42306169cb6c44ce191ac868f3d5167112b7e60c (patch) | |
| tree | fa18f2ee690e8e2d715ed7d3c8991e97c021f6a9 | |
| parent | dc79c9112b13dc5cec334c3c671b75e3cc43811c (diff) | |
| download | guix-north-america-42306169cb6c44ce191ac868f3d5167112b7e60c.tar.gz | |
balg02: Temporarily disable https until letsencrypt certs can be generated
| -rw-r--r-- | .guix/guix-na/config/balg02.scm | 35 |
1 files changed, 18 insertions, 17 deletions
diff --git a/.guix/guix-na/config/balg02.scm b/.guix/guix-na/config/balg02.scm index 2f73fbe..ead38a0 100644 --- a/.guix/guix-na/config/balg02.scm +++ b/.guix/guix-na/config/balg02.scm @@ -306,23 +306,24 @@ synonymous IETF language tags that should be mapped to the same $lang." "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"))) ;; HTTPS servers - (nginx-server-configuration - (listen '("443 ssl")) - (server-name '("cuirass.genenetwork.org")) - (ssl-certificate (le "cuirass.genenetwork.org")) - (ssl-certificate-key (le "cuirass.genenetwork.org" 'key)) - (locations (balg02-locations %publish-url)) - (raw-content - (append - %tls-settings - (list - "access_log /var/run/anonip/https.access.log;" - "proxy_set_header X-Forwarded-Host $host;" - "proxy_set_header X-Forwarded-Port $server_port;" - "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" - ;; For Cuirass admin interface authentication - "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;" - "ssl_verify_client optional;")))))) + ;; (nginx-server-configuration + ;; (listen '("443 ssl")) + ;; (server-name '("cuirass.genenetwork.org")) + ;; (ssl-certificate (le "cuirass.genenetwork.org")) + ;; (ssl-certificate-key (le "cuirass.genenetwork.org" 'key)) + ;; (locations (balg02-locations %publish-url)) + ;; (raw-content + ;; (append + ;; %tls-settings + ;; (list + ;; "access_log /var/run/anonip/https.access.log;" + ;; "proxy_set_header X-Forwarded-Host $host;" + ;; "proxy_set_header X-Forwarded-Port $server_port;" + ;; "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" + ;; ;; For Cuirass admin interface authentication + ;; "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;" + ;; "ssl_verify_client optional;")))) + )) (define %extra-content (list |