explain how it is that zimmermann speaks https

diff --git a/doc/zimmerman/changelog b/doc/zimmerman/changelog
index a92557dcb34aa81053b7a0acfa42e3f75562f395..46160a2391a02f0fe066d6c8976ddd685abd16de 100644 (file)
--- a/doc/zimmerman/changelog
+++ b/doc/zimmerman/changelog
@@ -7,6 +7,13 @@
 *  changes to this system (first command at top, last at bottom)             *
 ******************************************************************************
 
+2008-11-19 - mlc
+       * aptitude install nginx
+       * get rid of /etc/nginx/sites-enabled/default
+       * create /etc/nginx/sites-available/https-proxy and make a symlink
+         to it in the sites-enabled directory
+       * invoke-rc.d nginx start
+
 2008-11-17 - micah
        * verified the SHA256 values for the key material
        * /usr/lib/sks/sks_build.sh (chose option #2: normalbuild)

diff --git a/doc/zimmerman/https-proxy b/doc/zimmerman/https-proxy
new file mode 100644 (file)
index 0000000..c4521a7
--- /dev/null
+++ b/doc/zimmerman/https-proxy
@@ -0,0 +1,14 @@
+server {
+       listen  443;
+       server_name zimmermann.mayfirst.org;
+       ssl on;
+       ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
+       ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
+       ssl_ciphers HIGH:MEDIUM:!ADH;
+
+       access_log  off;
+
+       location / {
+               proxy_pass http://localhost:11371/;
+       }
+}