From c39046eeb713e5bf8c0ce52277d536ce6f70faff Mon Sep 17 00:00:00 2001
From: Abhinav Sarkar <abhinav@abhinavsarkar.net>
Date: Sun, 5 May 2019 07:13:30 +0000
Subject: [PATCH] Adds arpita.site

---
 .gitignore                  |  1 +
 docker-compose.yml          | 18 +++++++++++++++
 nginx-conf/arpita_site.conf | 44 +++++++++++++++++++++++++++++++++++++
 3 files changed, 63 insertions(+)
 create mode 100644 nginx-conf/arpita_site.conf

diff --git a/.gitignore b/.gitignore
index 337b47e..c6f2072 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,4 @@ portainer-data
 drone-data
 site-data
 pihole-log
+ghost
diff --git a/docker-compose.yml b/docker-compose.yml
index 49401bc..cc05bcc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -153,3 +153,21 @@ services:
       - DRONE_SERVER=drone-server:9000
       - DRONE_SECRET=${DRONE_SECRET}
 
+  arpita_site:
+    image: ghost:2.21-alpine
+    restart: always
+    volumes:
+     - ./ghost/arpita_site:/var/lib/ghost/content
+    environment:
+    # see https://docs.ghost.org/docs/config#section-running-ghost-with-config-env-variables
+      url: https://arpita.site
+      database__client: mysql
+      database__connection__host: mariadb
+      database__connection__user: root
+      database__connection__password: ${MR_PASSWORD}
+      database__connection__database: arpita_site
+      mail__transport: SMTP
+      mail__from: "Server <ghost@arpita.site>"
+      mail__options__service: SMTP
+      mail__options__host: smtp
+      mail__options__port: 25
diff --git a/nginx-conf/arpita_site.conf b/nginx-conf/arpita_site.conf
new file mode 100644
index 0000000..09de6ff
--- /dev/null
+++ b/nginx-conf/arpita_site.conf
@@ -0,0 +1,44 @@
+server {
+    listen 443 ssl;
+    server_name arpita.site;
+
+    ssl_certificate /etc/nginx/certs/arpita_site/fullchain.pem;
+    ssl_certificate_key /etc/nginx/certs/arpita_site/privkey.pem;
+
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    proxy_set_header X-Real-IP  $remote_addr; # pass on real client IP
+
+    location ~ .(aspx|php|jsp|cgi)$ {
+        deny all;
+    }
+
+    location / {
+            proxy_set_header X-Forwarded-For $remote_addr;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Host $http_host;
+            proxy_pass http://arpita_site:2368;
+    }
+
+    # Block Bad Bots
+    if ($bad_bot) { return 403; }
+
+    # Block Bad Referers
+    if ($bad_referer) { return 403; }
+}
+
+server {
+    listen 80;
+    server_name arpita.site;
+    return 301 https://$host$request_uri;
+}
+
+# remove 'www'
+server {
+    listen 80;
+    listen 443 ssl;
+    server_name www.arpita.site;
+    return 301 https://arpita.site$request_uri;
+}