From 8d10bd7d739be3a7bba3ab7a3784d99159d38206 Mon Sep 17 00:00:00 2001
From: inference <admin@inferencium.net>
Date: Sun, 19 Feb 2023 17:53:27 +0000
Subject: [PATCH] Add Inferencium Nginx Gitea configuration file.

---
 server/xb000-0/nginx/gitea.conf | 47 +++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 server/xb000-0/nginx/gitea.conf

diff --git a/server/xb000-0/nginx/gitea.conf b/server/xb000-0/nginx/gitea.conf
new file mode 100644
index 0000000..f27a9ee
--- /dev/null
+++ b/server/xb000-0/nginx/gitea.conf
@@ -0,0 +1,47 @@
+# Inferencium - xb000-0
+# Nginx - Configuration - Gitea
+
+# Copyright 2022-2023 Jake Winters
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+# Version: 0.0.0.0
+
+
+# Server (unencrypted)
+server {
+		# General
+        server_name    git.inferencium.net;
+        listen         80;
+        listen         [::]:80;
+
+		# Location
+        location / {
+                    return	301 https://$server_name$request_uri;
+    }
+}
+
+# Server (TLS)
+server {
+		# General
+		server_name git.inferencium.net;
+		listen 443 ssl http2;
+		listen [::]:443 ssl http2;
+	
+		# Security
+		ssl_certificate /etc/letsencrypt/live/git.inferencium.net/fullchain.pem;
+		ssl_certificate_key /etc/letsencrypt/live/git.inferencium.net/privkey.pem;
+		ssl_protocols TLSv1.3;
+		ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256";
+		ssl_conf_command Ciphersuites "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256";
+		ssl_conf_command Options PrioritizeChaCha;
+		ssl_prefer_server_ciphers on;
+
+		# Location
+		location / {
+		proxy_pass http://unix:/run/gitea/gitea.socket;
+		proxy_set_header Host $host;
+		proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}