blob: 89804574477d04590efd18f4f0fb0b4907c51f17 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
# This file creates an nginx server that serves the blog on port 8080.
#
# It's not intended to be the user-facing nginx.
{
# third_party attributes supplied by callPackage
writeText, writeShellScriptBin, nginx, lib,
# website content
blog, website
}:
let
inherit (builtins) hasAttr filter map;
inherit (pkgs.third_party) ;
oldRedirects = lib.concatStringsSep "\n" (map (post: ''
location ~* ^(/en)?/${post.oldKey} {
# TODO(tazjin): 301 once this works
return 302 https://tazj.in/blog/${post.key};
}
'') (filter (hasAttr "oldKey") blog.posts));
config = writeText "homepage-nginx.conf" ''
daemon off;
worker_processes 1;
error_log stderr;
pid /tmp/nginx-homepage.pid;
events {
worker_connections 1024;
}
http {
include ${nginx}/conf/mime.types;
fastcgi_temp_path /tmp/nginx-homepage;
uwsgi_temp_path /tmp/nginx-homepage;
scgi_temp_path /tmp/nginx-homepage;
client_body_temp_path /tmp/nginx-homepage;
proxy_temp_path /tmp/nginx-homepage;
sendfile on;
# Logging is handled by the primary nginx server
access_log off;
server {
listen 8080 default_server;
server_name tazj.in;
root ${website};
${oldRedirects}
location ~* \.(webp|woff2)$ {
add_header Cache-Control "public, max-age=31536000";
}
location /blog {
alias ${blog.rendered};
if ($request_uri ~ ^/(.*)\.html$) {
return 302 /$1;
}
try_files $uri $uri.html $uri/ =404;
}
}
server {
listen 8080;
server_name www.tazj.in;
return 301 https://tazj.in$request_uri;
}
}
'';
in writeShellScriptBin "homepage" ''
if [[ -v CONTAINER_SETUP ]]; then
cd /run
echo 'nogroup:x:30000:nobody' >> /etc/group
echo 'nobody:x:30000:30000:nobody:/tmp:/bin/bash' >> /etc/passwd
fi
mkdir -p /tmp/nginx-homepage
exec ${nginx}/bin/nginx -c ${config}
''
|
