From a0782f73c62f216992de2d60620711dded9046cb Mon Sep 17 00:00:00 2001
From: Luke Shumaker <lukeshu@sbcglobal.net>
Date: Tue, 31 Jan 2017 19:28:22 -0500
Subject: config-mgmt-nginx: Holo lets me put more of the config here.

---
 config-mgmt-nginx.PKGBUILD | 40 ++++++++++++++++++++++++++++++++++++++--
 1 file changed, 38 insertions(+), 2 deletions(-)

(limited to 'config-mgmt-nginx.PKGBUILD')

diff --git a/config-mgmt-nginx.PKGBUILD b/config-mgmt-nginx.PKGBUILD
index 626c8b1..11d62d2 100644
--- a/config-mgmt-nginx.PKGBUILD
+++ b/config-mgmt-nginx.PKGBUILD
@@ -1,5 +1,5 @@
 . ${BUILDFILE%/*}/common.sh
-pkgver=20161112
+pkgver=20170131
 
 package() {
 preamble
@@ -7,6 +7,43 @@ preamble
 
 depends+=(nginx)
 
+# `fastcgi.conf`, `fastcgi_params`, `scgi_params` and `uwsgi_params`
+# have been edited to pass 127.0.0.1 as the client IP address to
+# worker processes, to protect user privacy.
+add-file -m755 usr/share/holo/files/10-"$pkgname"/etc/nginx/fastcgi.conf.holoscript <<EOF
+#!/bin/sh
+{
+	echo '# -*- Mode: nginx; nginx-indent-level: 8; indent-tabs-mode: t -*-'
+	echo
+	sed -e '/^# -\\*- /d' -e 's/\\\$remote_addr;\$/127.0.0.1; # \$remote_addr; # Anonymize/'
+} | cat -s
+EOF
+ln -sfT fastcgi.conf.holoscript usr/share/holo/files/10-"$pkgname"/etc/nginx/fastcgi_params.holoscript
+ln -sfT fastcgi.conf.holoscript usr/share/holo/files/10-"$pkgname"/etc/nginx/scgi_params.holoscript
+ln -sfT fastcgi.conf.holoscript usr/share/holo/files/10-"$pkgname"/etc/nginx/uwsgi_params.holoscript
+
+# `mime.types` has had xz, gzip, bzip2, tar, PGP (`.sig`), and
+# bittorrent types added to it. This list was based on the unmatched
+# file extensions that `find` turned up on `repo.parabola.nu`.
+add-file -m755 usr/share/holo/files/10-"$pkgname"/etc/nginx/mime.types.holoscript <<EOF
+#!/bin/sh
+{
+	echo '# -*- Mode: nginx; nginx-indent-level: 4; indent-tabs-mode: nil -*-'
+	echo
+	sed -e '
+/types {/ {
+	a\\    application/x-xz                      xz;
+	a\\    application/x-gzip                    gz;
+	a\\    application/x-bzip2                   bz2;
+	a\\    application/x-tar                     tar;
+	a\\    application/octet-stream              sig;
+	a\\    application/x-bittorrent              torrent;
+	a\\
+
+}'
+} | awk '\$0==""||!x[\$0]++' | cat -s
+EOF
+
 add-file etc/nginx/sites/alias-parabolagnulinux_org.conf <<EOF
 # -*- Mode: nginx; nginx-indent-level: 8; indent-tabs-mode: t -*-
 # Redirect everything from *.parabolagnulinux.org to *.parabola.nu
@@ -45,4 +82,3 @@ add-unit etc/systemd/system/multi-user.target.wants/nginx.service
 
 postamble
 }
-
-- 
cgit v1.2.3-54-g00ecf