From b6f1a0f82567f28f78683b585e74532588efbd62 Mon Sep 17 00:00:00 2001
From: Florian Zumpe <florian.zumpe@gmx.de>
Date: Tue, 16 Jun 2026 12:47:19 +0200
Subject: [PATCH] change gitignore and system components

---
 .gitignore                 |  3 +++
 nginx/siteconfig           | 36 +++++++++++++++++++++++-------------
 systemd/wegwichtel.service | 10 +++++-----
 3 files changed, 31 insertions(+), 18 deletions(-)

diff --git a/.gitignore b/.gitignore
index ec5ad8d..b59730c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,6 @@ storage/trash/routes/*
 !storage/trash/routes/.gitkeep
 .env
 npm-debug.log*
+
+nginx/
+systemd/
diff --git a/nginx/siteconfig b/nginx/siteconfig
index 9d8d936..34e4d32 100644
--- a/nginx/siteconfig
+++ b/nginx/siteconfig
@@ -1,24 +1,19 @@
-server {
-    listen 80;
-    listen [::]:80;
-
-    server_name atlas.example.de;
-
-    return 301 https://$host$request_uri;
-}
-
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
 
-    server_name atlas.example.de;
+    server_name wegwichtel.de;
 
-    ssl_certificate     /etc/letsencrypt/live/atlas.example.de/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/atlas.example.de/privkey.pem;
+    ssl_certificate     /etc/letsencrypt/live/wegwichtel.de/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/wegwichtel.de/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
 
-    root /srv/www/wegwichtel/public;
+    root /srv/wegwichtel/Wegwichtel/public;
     index index.html;
 
+    error_log /srv/wegwichtel/logs/error.log warn;
+
     # Begrenzung des gesamten HTTP-Requests.
     # Wegen GPX-, Bild- und Audio-Uploads größer als das Node-Einzellimit.
     client_max_body_size 256m;
@@ -70,3 +65,18 @@ server {
         add_header X-Content-Type-Options "nosniff" always;
     }
 }
+
+server {
+    if ($host = wegwichtel.de) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    listen [::]:80;
+
+    server_name wegwichtel.de;
+    return 404; # managed by Certbot
+
+
+}
diff --git a/systemd/wegwichtel.service b/systemd/wegwichtel.service
index e9a456c..d8361c4 100644
--- a/systemd/wegwichtel.service
+++ b/systemd/wegwichtel.service
@@ -8,10 +8,10 @@ Type=simple
 User=wegwichtel
 Group=wegwichtel
 
-WorkingDirectory=/srv/www/wegwichtel
-EnvironmentFile=/srv/www/wegwichtel/.env
+WorkingDirectory=/srv/wegwichtel/Wegwichtel
+EnvironmentFile=/srv/wegwichtel/Wegwichtel/.env
 
-ExecStart=/usr/bin/node /srv/www/wegwichtel/server.js
+ExecStart=/usr/bin/node /srv/wegwichtel/Wegwichtel/server.js
 
 Restart=on-failure
 RestartSec=5
@@ -21,8 +21,8 @@ PrivateTmp=true
 ProtectSystem=full
 ProtectHome=true
 
-ReadWritePaths=/srv/www/wegwichtel/data
-ReadWritePaths=/srv/www/wegwichtel/storage
+ReadWritePaths=/srv/wegwichtel/Wegwichtel/data
+ReadWritePaths=/srv/wegwichtel/Wegwichtel/storage
 
 [Install]
 WantedBy=multi-user.target