internal: setup skfe internal.skia.org

skfe/sys/skia_org_nginx

 
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 ssl_ciphers 'AES128+EECDH:AES128+EDH';
 ssl_prefer_server_ciphers on;
 ssl_session_cache shared:SSL:10m;
 
 ssl_certificate         /etc/nginx/ssl/skia_org.pem;
 ssl_certificate_key     /etc/nginx/ssl/skia_org.key;
 
 proxy_connect_timeout       5m;
@@ skipping 429 matching lines @@
     error_log /var/log/nginx/bugchomper.error.log error;
 
     if ( $host != 'bugchomper.skia.org' ) {
         rewrite ^/(.*)$ https://bugchomper.skia.org/$1 permanent;
     }
 
     location / {
         proxy_pass http://skia-bugchomper:8050;
     }
 }
+
+#####   internal.skia.org   ###########################
+server {
+    listen      443;
+    server_name internal.skia.org;
+
+    access_log /var/log/nginx/internal.access.log;
+    error_log /var/log/nginx/internal.error.log error;
+
+    ssl on;
+
+    if ( $host != 'internal.skia.org' ) {

[stephana, 2015/08/27 14:31:32]

This if block should not be necessary (here or most of the other servers
defined). IIRC this was put for the case where we have two host names in the
same server definition and we want to redirect to the canonical host. 

[jcgregorio, 2015/08/27 14:33:31]

Done.

+        rewrite ^/(.*)$ https://internal.skia.org/$1 permanent;
+    }
+
+    location / {
+        proxy_pass http://skia-internal:8000;
+    }
+}
+
+server {
+    listen      80;
+    server_name internal.skia.org;
+    return 301 https://internal.skia.org$request_uri;
+}
+
+
 server {
     listen      80;
     server_name bugchomper.skia.org;
     return 301 https://bugchomper.skia.org$request_uri;
 }