Reverse proxy to bragi

1 files changed, 23 insertions, 0 deletions

diff --git a/custom/ymir-nginx.nix b/custom/ymir-nginx.nix
index 46256328..0d0ed8ce 100644
--- a/custom/ymir-nginx.nix
+++ b/custom/ymir-nginx.nix
@@ -136,6 +136,29 @@ in {
           uwsgi_modifier1 9;
         }
       }
+
+      server {
+        server *:80;
+        server [::]:80;
+        server_name ~^(.*\.)?bragi\.(yggdrasil\.li|141\.li)$;
+
+        return 301 https://$host$request_uri;
+      }
+
+      server {
+        server *:443 ssl;
+        server [::]:443 ssl;
+        server_name ~^(.*\.)?bragi\.(yggdrasil\.li|141\.li)$;
+
+        include ${acme};
+
+        location / {
+          auth_basic "Reverse proxy to bragi";
+          auth_basic_user_file /srv/www/bragi/htpasswd;
+
+          proxy_pass http://bragi.asgard.yggdrasil/;
+        }
+      }
     '';
   };
 }