Merge pull request #206 from HSLdevcom/dns-validation-path

Add a path under digitransit.fi for domain validation

Author: vesameskanen

nginx.conf

@@ -512,6 +512,14 @@ http {
     # Add HTTP Strict Transport Security for good measure.
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;";
 
+    # This is used by the certificate authority to validate we own the domain
+    location = /.well-known/pki-validation/fileauth.txt {
+      proxy_pass         https://dnsvalidationstorage.blob.core.windows.net/dnsfiles/fileauth.txt;
+      proxy_redirect     off;
+      proxy_set_header   X-Real-IP $remote_addr;
+      proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
     location / {
       proxy_pass         http://digitransit-site:8080;
       include basicsettings.conf;