default.conf.tmpl

server {
 listen ${PORT};

 #################################################
 # Stock useful config options, but ignore them :)
 #################################################
 include /etc/nginx/mime.types;

 autoindex off;
 default_type  application/octet-stream;
 sendfile on;

 # Gzip
 gzip on;
 gzip_min_length 1024;
 gzip_buffers 4 32k;
 gzip_types text/plain application/x-javascript text/javascript text/xml text/css;

 #####################################
 # Mounting MediaGoblin stuff
 # This is the section you should read
 #####################################

 # Change this to update the upload size limit for your users
 client_max_body_size 800m;

 # prevent attacks (someone uploading a .txt file that the browser
 # interprets as an HTML file, etc.)
 add_header X-Content-Type-Options nosniff;

 server_name $DOMAIN www.${DOMAIN};
 access_log /var/log/nginx/${DOMAIN}.access.log;
 error_log /var/log/nginx/${DOMAIN}.error.log;

 # MediaGoblin's stock static files: CSS, JS, etc.
 location /mgoblin_static/ {
    alias ${APP_ROOT}/mediagoblin/static/;
 }

 # Instance specific media:
 location /mgoblin_media/ {
    alias ${APP_ROOT}/user_dev/media/public/;
 }

 # Theme static files (usually symlinked in)
 location /theme_static/ {
    alias ${APP_ROOT}/user_dev/theme_static/;
 }

 # Plugin static files (usually symlinked in)
 location /plugin_static/ {
    alias ${APP_ROOT}/user_dev/plugin_static/;
 }

 # This is a view-only config, so block authentication.
 location /auth {
    deny all;
 }

 location / {
    proxy_pass http://127.0.0.1:6543;

    auth_basic "Caution: High Voltage";
    auth_basic_user_file /etc/nginx/.htpasswd;

    sub_filter "/mgoblin_media/media_entries/" "https://storage.googleapis.com/${GCS_BUCKET}/media_entries/";
    sub_filter_once off;
 }
}