OpenNeo/impress-2020
OpenNeo/impress-2020
1
0
Fork 0
Code Pull requests Activity

Future-proof our nginx config for IPv6

Browse source 
Today I learned that nginx requires a special invocation to listen to
IPv6 addresses as well as IPv4. On some of my other projects, this was
causing Let's Encrypt certificate renewal to fail, because Let's
Encrypt prefers to connect over IPv6 when an AAAA record is present, so
its challenges were always returning 404, because nginx wasn't
listening on IPv6.

This shouldn't be affecting impress-2020 in production, because we
don't have an AAAA record right now. But I'm just making this change in
all my projects, to make sure this doesn't bite me in the future!
This commit is contained in:
Emi Matchu 2024-02-13 08:43:06 -08:00
parent 179c492294
commit 448561604c
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
deploy/playbooks/setup.yml
View file

@ -232,6 +232,7 @@
server {
server_name impress-2020-box.openneo.net;
listen 80;
listen [::]:80;
if ($host = impress-2020-box.openneo.net) {
return 301 https://$host$request_uri;
}
@ -240,6 +241,7 @@
server {
server_name impress-2020-box.openneo.net;
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/impress-2020-box.openneo.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/impress-2020-box.openneo.net/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;