Sergei Poljanski
4865efd078
All checks were successful
deploy / ansible (push) Successful in 6m25s
The XMPP certificate covers xmpp.asxp.io and conference.asxp.io, which point at asxpio-services, so Let's Encrypt validates them there. A small nginx on port 80 passes /.well-known/acme-challenge/ over the VPC to Traefik, which holds all certificates, and answers 404 to the rest. Assisted-by: Claude:opus-5-5
16 lines
344 B
Django/Jinja
16 lines
344 B
Django/Jinja
# Managed by Ansible (role acme_forward).
|
|
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
server_tokens off;
|
|
access_log off;
|
|
|
|
location /.well-known/acme-challenge/ {
|
|
proxy_pass http://{{ asxpio_ops_vpc_ip }};
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
location / {
|
|
return 404;
|
|
}
|
|
}
|