Re: Help with setting up man.cgi with nginx

[Aisha Tammy <openbsd@aisha.cc>]

On 12/15/20 10:28 PM, Stephen Gregoratto wrote:
> Hi Aisha,
> 
> Here is what I use for man.sgregoratto.me, which I cribbed from the Void
> Linux Project:
> 
>   server {
>     listen 80;
>     listen [::]:80;
>     server_name man.sgregoratto.me;
>     include /etc/nginx/templates/acme-client.tmpl;
>     return 302 https://$host$request_uri;
>   }
> 
>   server {
>     listen 443 ssl http2;
>     listen [::]:443 ssl http2;
>     server_name man.sgregoratto.me;
> 
>     location = /mandoc.css {
> 	root /var/www/htdocs;
>     }
>     location /  {
>       gzip off;
>       fastcgi_split_path_info ^(/)(.*)$;
> 
>       fastcgi_param 	QUERY_STRING	$query_string;
>       fastcgi_param	REQUEST_METHOD	$request_method;
>       fastcgi_param	PATH_INFO	$fastcgi_path_info;
>       fastcgi_param	SCRIPT_FILENAME	/cgi-bin/man.cgi;
>       fastcgi_pass	unix:/run/slowcgi.sock;
>     }
> 
>     ssl_certificate /etc/ssl/man.sgregoratto.me.pem;
>     ssl_certificate_key /etc/ssl/private/man.sgregoratto.me.key;
>     ssl_stapling_file /etc/ssl/man.sgregoratto.me.der;
>     include /etc/nginx/templates/*.tmpl;
>   }
> 
> The templates are things like setting headers, OCSP stapling and ACME
> challenge stuff. This setup allows all requests to go to the root of the
> domain, similar to man.openbsd.org. Speaking of, here's a similar config
> for httpd that I got from Ingo a while back:
> 
>   server "man.sgregoratto.me" {
>     listen on * port 80
>     location "/.well-known/acme-challenge/*" {
>       root "/acme"
>       request strip 2
>     }
>     location * {
>       block return 302 "https://$SERVER_NAME$REQUEST_URI"
>     }
>   }
>   server "man.sgregoratto.me" {
>     listen on * tls port 443
>     hsts max-age 31536000
>     root "/htdocs"
> 
>     tls {
>       certificate "/etc/ssl/man.sgregoratto.me.pem"
>       key "/etc/ssl/private/man.sgregoratto.me.key"
>       ocsp "/etc/ssl/man.sgregoratto.me.der"
>     }
>     location "/.well-known/acme-challenge/*" {
>       root "/acme"
>       request strip 2
>       pass
>     }
>     location "/mandoc.css" {
>       root "/htdocs"
>     }
>     location "*" {
>       fastcgi
>       root "/cgi-bin/man.cgi"
>     }
>   }
> 


!!!! Thanks a lot, I really appreciate it :D

Cheers,
Aisha
--
 To unsubscribe send an email to discuss+unsubscribe@mandoc.bsd.lv