prep nginx config for letsencrypt acme challenges

Author: erorus

letsencrypt.wellknown/.gitignore

@@ -0,0 +1,3 @@
+*
+!.gitignore
+

lighttpd.conf/newsstand.nginx.conf

@@ -3,7 +3,7 @@ ssl_dhparam /var/newsstand/private/ssl/dhparams.pem;
 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA;
 ssl_prefer_server_ciphers on;
 ssl_session_cache shared:SSL:4m;
-resolver 4.2.2.1 4.2.2.2 4.2.2.3 4.2.2.4
+resolver 4.2.2.1 4.2.2.2 4.2.2.3 4.2.2.4;
 
 log_not_found off;
 
@@ -23,7 +23,12 @@ server {
     listen [2605:9880:0:3::10]:80;
     access_log off;
     error_log  /var/newsstand/logs/error.undermine.log crit;
-    return 301 https://theunderminejournal.com$request_uri;
+    location /.well-known/acme-challenge/ {
+        alias /var/newsstand/letsencrypt.wellknown/;
+    }
+    location / {
+        return 301 https://theunderminejournal.com$request_uri;
+    }
 }
 
 server {
@@ -130,6 +135,9 @@ server {
 
     error_page 404 =301 https://theunderminejournal.com$request_uri;
 
+    location /.well-known/acme-challenge/ {
+        alias /var/newsstand/letsencrypt.wellknown/;
+    }
     location ~ ^/TheUndermineJournal\.zip {
         return 301 https://addon.theunderminejournal.com/TheUndermineJournal.zip;
     }
@@ -173,6 +181,10 @@ server {
         return 301 https://addon.theunderminejournal.com/TheUndermineJournal.zip;
     }
 
+    location /.well-known/acme-challenge/ {
+        alias /var/newsstand/letsencrypt.wellknown/;
+    }
+
     location ~ ^/TheUndermineJournal\.zip {
         expires modified 4d;
     }
@@ -184,7 +196,14 @@ server {
     listen [2605:9880:0:3::11]:80;
     access_log off;
     error_log  /var/newsstand/logs/error.wowtoken.log crit;
-    return 301 https://wowtoken.info$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        alias /var/newsstand/letsencrypt.wellknown/;
+    }
+
+    location / {
+        return 301 https://wowtoken.info$request_uri;
+    }
 }
 
 server {