🍽 Fork YunoHost — snapshot mangé par la machine à tsoins

Upstream: https://github.com/YunoHost/yunohost @ 3a5f8bac8301c450897b96cbd43a4c7d3ba750fb
But (José) : transformer tout le code en bions + ploxions du xerboxion.
La carte de digestion vit au labo : /yunohost-digest.json

conf/nginx/tls_passthrough_server.conf

@@ -0,0 +1,38 @@
+# This snippet is only here to redirect traffic to another domain on port 80,
+# which is also forwarded for port 443 based on the SNI (which is handled
+# differently because of the whole SNI story) 
+
+# We don't explicitly redirect to HTTPS by default and let the forwarded server
+# handle the redirection (or not depending on what's configured on the other
+# server)
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name {{ tls_passthrough_domain }};
+
+    location / {
+        proxy_pass http://{{ tls_passthrough_ip }};
+
+        proxy_set_header Host $host;
+        proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Host $http_host;
+        proxy_set_header X-Forwarded-Uri $request_uri;
+        proxy_set_header X-Forwarded-Ssl on;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Connection "";
+
+        real_ip_header X-Forwarded-For;
+        real_ip_recursive on;
+
+        send_timeout 5m;
+        proxy_read_timeout 360;
+        proxy_send_timeout 360;
+        proxy_connect_timeout 360;
+    }
+
+    access_log /var/log/nginx/{{ tls_passthrough_domain }}-access.log;
+    error_log /var/log/nginx/{{ tls_passthrough_domain }}-error.log;
+}