diff --git a/servers/puppet/modules/humbug/files/nginx/sites-available/zulip-staging b/servers/puppet/modules/humbug/files/nginx/sites-available/zulip-staging new file mode 100644 index 0000000000..0c62b66227 --- /dev/null +++ b/servers/puppet/modules/humbug/files/nginx/sites-available/zulip-staging @@ -0,0 +1,20 @@ +server { + listen 80; + server_name staging.zulip.com; + return 301 https://$server_name$request_uri; +} + +server { + listen 443; + + ssl on; + ssl_certificate /etc/ssl/certs/staging.zulip.com.combined-chain.crt; + ssl_certificate_key /etc/ssl/private/staging_and_dev.humbughq.com.key; + + server_name staging.zulip.com; + + # Avoid clickjacking attacks + add_header X-Frame-Options DENY; + + include /etc/nginx/humbug-include/app; +} diff --git a/servers/puppet/modules/humbug/manifests/staging_app_frontend.pp b/servers/puppet/modules/humbug/manifests/staging_app_frontend.pp index ffd3ddac9e..509bb36229 100644 --- a/servers/puppet/modules/humbug/manifests/staging_app_frontend.pp +++ b/servers/puppet/modules/humbug/manifests/staging_app_frontend.pp @@ -13,5 +13,9 @@ class humbug::staging_app_frontend { ensure => 'link', target => '/etc/nginx/sites-available/humbug-staging', } + file { '/etc/nginx/sites-enabled/zulip-staging': + ensure => 'link', + target => '/etc/nginx/sites-available/zulip-staging', + } }