wmdeit-cf-wmdelib/templates/nginx-vhost.conf.mustache

#
# Managed by CFEengine
#

{{^vars.nginx_vhost.site.ssl}}
server {
	listen {{vars.nginx_vhost.site.listen}};
	server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};
	root {{vars.nginx_vhost.site.doc_root}};

	location ^~ /.well-known/acme-challenge/ {
		alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
		try_files $uri $uri/ =404;
	}
	{{{vars.nginx_vhost.site.raw}}}
}
{{/vars.nginx_vhost.site.ssl}}

{{#vars.nginx_vhost.site.ssl}}
server {
	listen *:80;

	server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};

	location ^~ /.well-known/acme-challenge/ {
		alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
		try_files $uri $uri/ =404;
	}
	access_log	/var/log/nginx/{{vars.nginx_vhost.site.domain}}.access.log;
	error_log	/var/log/nginx/{{vars.nginx_vhost.site.domain}}.error.log;

	return		301 https://$host$request_uri;
}

server {
	listen *:443 ssl;
##	ssl on;

	server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};

	location ^~ /.well-known/acme-challenge/ {
		alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
		try_files $uri $uri/ =404;
	}

	ssl_certificate           {{vars.nginx_vhost.ssl_cert}};
	ssl_certificate_key       {{vars.nginx_vhost.ssl_key}};

#	ssl_dhparam               /etc/nginx/dhparam.pem;

	access_log  /var/log/nginx/{{vars.nginx_vhost.site.domain}}.access.log;
	error_log  /var/log/nginx/{{vars.nginx_vhost.site.domain}}.error.log;
	root {{vars.nginx_vhost.site.doc_root}};
	{{{vars.nginx_vhost.site.raw}}}
	{{{vars.nginx_vhost.site.sslraw}}}
}


{{/vars.nginx_vhost.site.ssl}}

{{{vars.nginx_vhost.site.xraw}}}