configures HTTPS

This patch synchronizes manually the changes performed by certbot in the production server.

Author: fxn

config/nginx.conf

@@ -25,6 +25,14 @@ server {
     location @s_edge {
       rewrite ^ http://edgeapi.rubyonrails.org$request_uri redirect;
     }
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 server {
@@ -54,6 +62,14 @@ server {
     location @s_edge {
       rewrite ^ http://edgeguides.rubyonrails.org$request_uri redirect;
     }
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 #
@@ -66,6 +82,14 @@ server {
 
     root /home/rails/api/edge;
     index index.html;
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 server {
@@ -79,6 +103,14 @@ server {
 
     root /home/rails/guides/edge;
     index index.html;
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
 }
 
 #
@@ -109,3 +141,56 @@ server {
     server_name www.rubyonrails.org;
     return 301 http://rubyonrails.org;
 }
+
+
+server {
+    if ($host = api.rubyonrails.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    server_name api.rubyonrails.org;
+    listen 80;
+    return 404; # managed by Certbot
+
+
+}
+
+server {
+    if ($host = edgeapi.rubyonrails.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    server_name edgeapi.rubyonrails.org;
+    listen 80;
+    return 404; # managed by Certbot
+
+
+}
+
+server {
+    if ($host = edgeguides.rubyonrails.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    server_name edgeguides.rubyonrails.org;
+    listen 80;
+    return 404; # managed by Certbot
+
+
+}
+
+server {
+    if ($host = guides.rubyonrails.org) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    server_name guides.rubyonrails.org;
+    listen 80;
+    return 404; # managed by Certbot
+
+
+}