pad config

group_vars/pad.yaml

@@ -1,10 +1,25 @@
 ---
 
+acme_domains:
+ - pad.bitlair.nl
+
 etherpad_domain: pad.bitlair.nl
 
 nginx_sites:
   - server_name: "pad.bitlair.nl"
     localproxy: "9001"
+    pre_config:
+      - "# WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html"
+      - "map $http_upgrade $connection_upgrade {"
+      - "   default upgrade;"
+      - "   ''      close;"
+      - "}"
+    config:
+      - "location / {"
+      - "  # WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html"
+      - "  proxy_set_header  Upgrade $http_upgrade;"
+      - "  proxy_set_header  Connection $connection_upgrade;"
+      - "}"
 
 group_nft_input:
   - "# Allow web-traffic from world"

roles/nginx/templates/site.conf.j2

@@ -1,5 +1,9 @@
 # {{ ansible_managed }}
 
+{% for line in site.pre_config | default([]) %}
+{{ line }}
+{% endfor %}
+
 server {
     listen 443 ssl http2;
     listen [::]:443 ssl http2;