From 855f78f21a1b94ea82e82b544092c6d840802774 Mon Sep 17 00:00:00 2001
From: Reinoud Bruyndonckx <rbruyndonckx@kangaroot.net>
Date: Fri, 11 Apr 2025 17:22:47 +0200
Subject: [PATCH] first commit

---
 .gitignore             |  1 +
 README.md              |  9 +++++++++
 docker-compose.yaml    | 25 +++++++++++++++++++++++++
 ksa.reinoud.cloud.conf | 31 +++++++++++++++++++++++++++++++
 4 files changed, 66 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 README.md
 create mode 100644 docker-compose.yaml
 create mode 100644 ksa.reinoud.cloud.conf

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..4c49bd7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.env
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..076a177
--- /dev/null
+++ b/README.md
@@ -0,0 +1,9 @@
+# Documentatie
+
+In dit document ga je de nodig info vinden over hoe `ksawestmalle.be` is opgezet en hoe deze beheerd moet worden.
+
+Ik ga proberen te beginnen met niet technisch en hoe verder je in dit document leest te meer technisch het gaat worden.
+
+# Standaard beheer & Layout
+
+Dit gaat allemaal via de webinterface op `https://ksawestmalle.be/login`. Onze website draait op software genaamd [wordpress](https://wordpress.org/) dus als je iets specifiek zoekt kan je zo tutorials opzoeken. Daarnaast maken we gebruik van een speciale editor genaamt Element. Als je een pagina wilt aanpassen klik je dus best altijd op "Edit with Element".
diff --git a/docker-compose.yaml b/docker-compose.yaml
new file mode 100644
index 0000000..e2f90b7
--- /dev/null
+++ b/docker-compose.yaml
@@ -0,0 +1,25 @@
+services:
+  db:
+    image: mariadb:10.6.4-focal
+    restart: always
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: wordpress
+      MYSQL_USER: wordpress
+      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
+    volumes:
+      - /data/db:/var/lib/mysql
+
+  wordpress:
+    image: wordpress:latest
+    ports:
+      - "8080:80"
+    restart: always
+    environment:
+      WORDPRESS_DB_HOST: db:3306
+      WORDPRESS_DB_NAME: wordpress
+      WORDPRESS_DB_USER: wordpress
+      WORDPRESS_DB_PASSWORD: ${WORDPRESS_DB_PASSWORD}
+    volumes:
+      - /data/wordpress:/var/www/html
+
diff --git a/ksa.reinoud.cloud.conf b/ksa.reinoud.cloud.conf
new file mode 100644
index 0000000..5020028
--- /dev/null
+++ b/ksa.reinoud.cloud.conf
@@ -0,0 +1,31 @@
+# /etc/nginx/conf.d/ksa.reinoud.cloud.conf
+server {
+    listen 80;
+    listen [::]:80;
+    server_name ksa.reinoud.cloud www.ksa.reinoud.cloud;
+
+    # Redirect all HTTP requests to HTTPS
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name ksa.reinoud.cloud www.ksa.reinoud.cloud;
+
+    ssl_certificate /etc/letsencrypt/live/ksa.reinoud.cloud/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/ksa.reinoud.cloud/privkey.pem;
+
+    # Optional: Use strong SSL settings
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    location / {
+        proxy_pass http://localhost:8080;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+