1 files changed, 44 insertions, 0 deletions
diff --git a/playbooks/templates/nginx/git.conf.j2 b/playbooks/templates/nginx/git.conf.j2
new file mode 100644
index 0000000..d6a0f1c
--- /dev/null
+++ b/playbooks/templates/nginx/git.conf.j2
@@ -0,0 +1,44 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name git.{{ domain }};
+
+    return 301 https://$host$request_uri;
+}
+
+server {
+    server_name git.{{ domain }};
+
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    root /usr/share/cgit;
+
+    location /cgit.css {
+        alias /usr/share/cgit/cgit.css;
+    }
+
+    location /cgit.png {
+        alias /usr/share/cgit/cgit.png;
+    }
+
+    location /favicon.ico {
+        alias /usr/share/cgit/favicon.ico;
+    }
+
+    location / {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /usr/lib/cgit/cgit.cgi;
+        fastcgi_param PATH_INFO $uri;
+        fastcgi_param QUERY_STRING $args;
+        fastcgi_pass unix:/run/fcgiwrap.socket;
+    }
+
+    ssl_certificate /etc/letsencrypt/live/git.{{ domain }}/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/git.{{ domain }}/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    access_log /var/log/nginx/git/access.log;
+    error_log /var/log/nginx/git/error.log;
+}