Merge branch 'charclass'

* charclass: (24 commits)
  www: require ASCII word characters for CSS filenames
  www: require ASCII range for mbox downloads
  githttpbackend: require ASCII in path
  require ASCII digits for local FS items
  www: require ASCII digit for git epoch
  solver|viewdiff: restrict digit matches to ASCII
  inbox: require ASCII digits for feedmax var
  filter/rubylang: require ASCII digit for mailcount
  msgtime: require ASCII digits for parsing dates
  searchview: do not allow non-ASCII offsets and limits
  githttpbackend: require Range:, Status: to be ASCII digits
  view: require YYYYmmDD(HHMMSS) timestamps to be ASCII
  newswww: only accept ASCII digits as article numbers
  config: do not accept non-ASCII digits in cgitrc params
  www: require ASCII filenames in git blob downloads
  www: only emit ASCII chars in attachment filenames
  wwwattach: only pass the charset through if ASCII
  wwwlisting: require ASCII digit for port number
  http: require SERVER_PORT to be ASCII digit
  feed: only accept ASCII digits for ref~$N
  ...

diff --git a/MANIFEST b/MANIFEST
index c1a5d677f4d232ec1b432bf26574dc92aa95d2ad..8a3f2a4a3a229cc75b04092a5e0de1c31178d2dd 100644 (file)
--- a/MANIFEST
+++ b/MANIFEST
@@ -51,6 +51,7 @@ examples/cgit.psgi
 examples/highlight.psgi
 examples/logrotate.conf
 examples/newswww.psgi
+examples/nginx_proxy
 examples/public-inbox-config
 examples/public-inbox-httpd.socket
 examples/public-inbox-httpd@.service

diff --git a/examples/nginx_proxy b/examples/nginx_proxy
new file mode 100644 (file)
index 0000000..38e6064
--- /dev/null
+++ b/examples/nginx_proxy
@@ -0,0 +1,24 @@
+# Example NGINX configuration to proxy-pass requests\r
+# to public-inbox-httpd or to a standalone PSGI/Plack server.\r
+# The daemon is assumed to be running locally on port 8001.\r
+# Adjust ssl certificate paths if you use any, or remove\r
+# the ssl configuration directives if you don't.\r
+server {\r
+       server_name _;\r
+       listen 80;\r
+\r
+       access_log /var/log/nginx/public-inbox-httpd_access.log;\r
+       error_log /var/log/nginx/public-inbox-httpd_error.log;\r
+\r
+       location ~* ^/(.*)$ {\r
+               proxy_set_header    HOST $host;\r
+               proxy_set_header    X-Real-IP $remote_addr;\r
+               proxy_set_header    X-Forwarded-Proto $scheme;\r
+               proxy_pass          http://127.0.0.1:8001$request_uri;\r
+       }\r
+\r
+       listen 443 ssl;\r
+       ssl_certificate /path/to/certificate.pem;\r
+       ssl_certificate_key /path/to/certificate_key.pem;\r
+}\r
+\r