From 42306169cb6c44ce191ac868f3d5167112b7e60c Mon Sep 17 00:00:00 2001 From: Collin J. Doering Date: Fri, 31 May 2024 09:53:59 -0400 Subject: balg02: Temporarily disable https until letsencrypt certs can be generated --- .guix/guix-na/config/balg02.scm | 35 ++++++++++++++++++----------------- 1 file changed, 18 insertions(+), 17 deletions(-) (limited to '.guix/guix-na/config/balg02.scm') diff --git a/.guix/guix-na/config/balg02.scm b/.guix/guix-na/config/balg02.scm index 2f73fbe..ead38a0 100644 --- a/.guix/guix-na/config/balg02.scm +++ b/.guix/guix-na/config/balg02.scm @@ -306,23 +306,24 @@ synonymous IETF language tags that should be mapped to the same $lang." "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"))) ;; HTTPS servers - (nginx-server-configuration - (listen '("443 ssl")) - (server-name '("cuirass.genenetwork.org")) - (ssl-certificate (le "cuirass.genenetwork.org")) - (ssl-certificate-key (le "cuirass.genenetwork.org" 'key)) - (locations (balg02-locations %publish-url)) - (raw-content - (append - %tls-settings - (list - "access_log /var/run/anonip/https.access.log;" - "proxy_set_header X-Forwarded-Host $host;" - "proxy_set_header X-Forwarded-Port $server_port;" - "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" - ;; For Cuirass admin interface authentication - "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;" - "ssl_verify_client optional;")))))) + ;; (nginx-server-configuration + ;; (listen '("443 ssl")) + ;; (server-name '("cuirass.genenetwork.org")) + ;; (ssl-certificate (le "cuirass.genenetwork.org")) + ;; (ssl-certificate-key (le "cuirass.genenetwork.org" 'key)) + ;; (locations (balg02-locations %publish-url)) + ;; (raw-content + ;; (append + ;; %tls-settings + ;; (list + ;; "access_log /var/run/anonip/https.access.log;" + ;; "proxy_set_header X-Forwarded-Host $host;" + ;; "proxy_set_header X-Forwarded-Port $server_port;" + ;; "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;" + ;; ;; For Cuirass admin interface authentication + ;; "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;" + ;; "ssl_verify_client optional;")))) + )) (define %extra-content (list -- cgit v1.2.3