From 65652650577bd6938e1b1586129b13109b182d8e Mon Sep 17 00:00:00 2001
From: j <j@mailb.org>
Date: Fri, 12 Nov 2021 17:03:13 +0000
Subject: [PATCH] add etc

---
 etc/nginx/sites-available/event-timeline  | 69 +++++++++++++++++++++++
 etc/systemd/system/event-timeline.service | 14 +++++
 2 files changed, 83 insertions(+)
 create mode 100644 etc/nginx/sites-available/event-timeline
 create mode 100644 etc/systemd/system/event-timeline.service

diff --git a/etc/nginx/sites-available/event-timeline b/etc/nginx/sites-available/event-timeline
new file mode 100644
index 0000000..36cf811
--- /dev/null
+++ b/etc/nginx/sites-available/event-timeline
@@ -0,0 +1,69 @@
+upstream django-backend {
+    server 127.0.0.1:8080;
+}
+
+server {
+        listen 80;
+        listen [::]:80;
+        location /.well-known/ {
+            root /var/www/html;
+            autoindex off;
+        }
+        rewrite ^/(.*) https://event-timeline/$1 permanent;
+}
+
+server {
+    server_tokens off;
+
+    server_name  event-timeline;
+    listen   443 ssl http2;
+    listen   [::]:443 ssl http2;
+
+    ssl_trusted_certificate /etc/letsencrypt/live/event-timeline/chain.pem;
+    ssl_certificate /etc/letsencrypt/live/event-timeline/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/event-timeline/privkey.pem;
+    #include /etc/letsencrypt/nginx.conf;
+
+    location /favicon.ico {
+        root   /srv/event-timeline/www/static;
+    }
+
+    location /media/ {
+        root   /srv/event-timeline/data/;
+    }
+    location /static/ {
+        root   /srv/event-timeline/www/;
+    }
+
+    location / {
+        root   /srv/event-timeline/public;
+        try_files $uri @proxy_to_app;
+    }
+
+    location @proxy_to_app {
+        proxy_pass http://django-backend;
+
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        proxy_redirect off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Host $server_name;
+        client_max_body_size 32m;
+    }
+
+    error_page  400  /;
+    error_page  404  /404.html;
+    location  /404.html {
+        root   /srv/event-timeline/www/static/html;
+    }
+
+    # redirect server error pages to the static page /50x.html
+    error_page   500 502 503 504  /50x.html;
+    location  /50x.html {
+        root   /srv/event-timeline/www/static/html;
+    }
+}
diff --git a/etc/systemd/system/event-timeline.service b/etc/systemd/system/event-timeline.service
new file mode 100644
index 0000000..505d26e
--- /dev/null
+++ b/etc/systemd/system/event-timeline.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=event-timeline
+
+[Service]
+Type=simple
+Restart=always
+User=event-timeline
+Group=event-timeline
+WorkingDirectory=/srv/event-timeline
+ExecReload=/bin/kill -HUP $MAINPID
+ExecStart=/srv/event-timeline/venv/bin/gunicorn app.wsgi:application --reuse-port -b 127.0.0.1:8080
+
+[Install]
+WantedBy=multi-user.target