Re: Help with setting up man.cgi with nginx

[Stephen Gregoratto <dev@sgregoratto.me>]

Hi Aisha,

Here is what I use for man.sgregoratto.me, which I cribbed from the Void
Linux Project:

  server {
    listen 80;
    listen [::]:80;
    server_name man.sgregoratto.me;
    include /etc/nginx/templates/acme-client.tmpl;
    return 302 https://$host$request_uri;
  }

  server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name man.sgregoratto.me;

    location = /mandoc.css {
	root /var/www/htdocs;
    }
    location /  {
      gzip off;
      fastcgi_split_path_info ^(/)(.*)$;

      fastcgi_param 	QUERY_STRING	$query_string;
      fastcgi_param	REQUEST_METHOD	$request_method;
      fastcgi_param	PATH_INFO	$fastcgi_path_info;
      fastcgi_param	SCRIPT_FILENAME	/cgi-bin/man.cgi;
      fastcgi_pass	unix:/run/slowcgi.sock;
    }

    ssl_certificate /etc/ssl/man.sgregoratto.me.pem;
    ssl_certificate_key /etc/ssl/private/man.sgregoratto.me.key;
    ssl_stapling_file /etc/ssl/man.sgregoratto.me.der;
    include /etc/nginx/templates/*.tmpl;
  }

The templates are things like setting headers, OCSP stapling and ACME
challenge stuff. This setup allows all requests to go to the root of the
domain, similar to man.openbsd.org. Speaking of, here's a similar config
for httpd that I got from Ingo a while back:

  server "man.sgregoratto.me" {
    listen on * port 80
    location "/.well-known/acme-challenge/*" {
      root "/acme"
      request strip 2
    }
    location * {
      block return 302 "https://$SERVER_NAME$REQUEST_URI"
    }
  }
  server "man.sgregoratto.me" {
    listen on * tls port 443
    hsts max-age 31536000
    root "/htdocs"

    tls {
      certificate "/etc/ssl/man.sgregoratto.me.pem"
      key "/etc/ssl/private/man.sgregoratto.me.key"
      ocsp "/etc/ssl/man.sgregoratto.me.der"
    }
    location "/.well-known/acme-challenge/*" {
      root "/acme"
      request strip 2
      pass
    }
    location "/mandoc.css" {
      root "/htdocs"
    }
    location "*" {
      fastcgi
      root "/cgi-bin/man.cgi"
    }
  }
-- 
Stephen Gregoratto
--
 To unsubscribe send an email to discuss+unsubscribe@mandoc.bsd.lv