From 4971a863f3dc191ddda1db6dfa8ff998c244a31a Mon Sep 17 00:00:00 2001
From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Tue, 2 Jan 2024 13:00:01 +0100
Subject: [PATCH] Serve scripts for interacting with the database through
 nginx.

---
 metrics.conf | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 metrics.conf

diff --git a/metrics.conf b/metrics.conf
new file mode 100644
index 0000000..d66393d
--- /dev/null
+++ b/metrics.conf
@@ -0,0 +1,43 @@
+# Copyright (c) 2024 Jakub Czajka <jakub@ekhem.eu.org>
+# License: GPL-3.0 or later.
+
+server {
+    server_name  metrics.${private_domain};
+
+    listen       [::]:443 ssl http2;
+    listen       443 ssl http2;
+
+    ssl_certificate ${private_ssl_cert_dir}/fullchain.pem;
+    ssl_certificate_key ${private_ssl_cert_dir}/privkey.pem;
+
+    ssl_client_certificate ${ca_dir}/ca.pem;
+    ssl_verify_client on;
+
+    root ${prod_dir}/metrics;
+
+    location ~ ^/sleep {
+        include fastcgi_params;
+        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+        fastcgi_param REQUEST_BODY ${dollar}request_body;
+        fastcgi_param SCRIPT_FILENAME ${dollar}document_root/sleep.sh;
+    }
+
+    location = / {
+        include fastcgi_params;
+        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+        fastcgi_param SCRIPT_FILENAME ${dollar}document_root/metrics.sh;
+    }
+}
+
+server {
+    server_name  metrics.${private_domain};
+
+    listen       [::]:80;
+    listen       80;
+
+    if (${dollar}host = metrics.${private_domain}) {
+        return 301 https://${dollar}host${dollar}request_uri;
+    }
+
+    return 404;
+}
-- 
2.39.5