From 69118a130f9d2dbf727358a701d006b08c8059f4 Mon Sep 17 00:00:00 2001 From: Anton Afanasyeu Date: Fri, 10 Jul 2026 15:36:53 +0200 Subject: [PATCH] feat(fe): add notify.f0xx.org nginx vhost snippet Proxy broadcast public landing pages to ac_be_backend for lab/prod FE install. Co-authored-by: Cursor --- fe/notify.f0xx.org.conf | 43 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 fe/notify.f0xx.org.conf diff --git a/fe/notify.f0xx.org.conf b/fe/notify.f0xx.org.conf new file mode 100644 index 0000000..8b2550d --- /dev/null +++ b/fe/notify.f0xx.org.conf @@ -0,0 +1,43 @@ +# FE Gentoo — notify.f0xx.org (broadcast public landing pages) +# Requires upstream ac_be_backend from ac-platform-edge/fe/ac-fe-upstream.conf +# BE: cast01–03 nginx server_name notify.f0xx.org → /var/www/ac/broadcast/public + +server { + listen 80; + server_name notify.f0xx.org; + + location ^~ /.well-known/acme-challenge/ { + root /var/www/letsencrypt; + allow all; + } + + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl http2; + server_name notify.f0xx.org; + + ssl_certificate /etc/letsencrypt/live/notify.f0xx.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/notify.f0xx.org/privkey.pem; + + access_log /var/log/nginx/notify.f0xx.org.access_log main; + error_log /var/log/nginx/notify.f0xx.org.error_log info; + + location / { + proxy_pass http://ac_be_backend; + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_connect_timeout 120s; + proxy_send_timeout 120s; + proxy_read_timeout 180s; + proxy_buffers 16 16m; + proxy_buffer_size 16m; + client_body_buffer_size 16m; + client_max_body_size 16m; + proxy_buffering off; + } +}