68 lines
1.8 KiB
Plaintext
68 lines
1.8 KiB
Plaintext
#
|
|
# Managed by CFEengine
|
|
#
|
|
|
|
|
|
{{^vars.nginx_vhost.site.ssl}}
|
|
server {
|
|
listen *:80;
|
|
server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};
|
|
root {{vars.nginx_vhost.site.doc_root}};
|
|
|
|
location ^~ /.well-known/acme-challenge/ {
|
|
alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
{{{vars.nginx_vhost.site.raw}}}
|
|
}
|
|
{{/vars.nginx_vhost.site.ssl}}
|
|
|
|
|
|
{{#vars.nginx_vhost.site.ssl}}
|
|
|
|
server {
|
|
listen *:80;
|
|
|
|
server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};
|
|
|
|
location ^~ /.well-known/acme-challenge/ {
|
|
alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
access_log /var/log/nginx/{{vars.nginx_vhost.site.domain}}.access.log;
|
|
error_log /var/log/nginx/{{vars.nginx_vhost.site.domain}}.error.log;
|
|
|
|
return 301 https://{{vars.nginx_vhost.site.domain}}$request_uri;
|
|
}
|
|
|
|
|
|
server {
|
|
listen *:443;
|
|
ssl on;
|
|
|
|
|
|
server_name {{vars.nginx_vhost.site.domain}} {{#vars.nginx_vhost.site.aliases}}{{.}} {{/vars.nginx_vhost.site.aliases}};
|
|
|
|
location ^~ /.well-known/acme-challenge/ {
|
|
alias {{vars.nginx.default_html_dir}}/.well-known/acme-challenge/;
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
|
|
ssl_certificate {{vars.nginx_vhost.ssl_cert}};
|
|
ssl_certificate_key {{vars.nginx_vhost.ssl_key}};
|
|
|
|
# ssl_dhparam /etc/nginx/dhparam.pem;
|
|
|
|
access_log /var/log/nginx/{{vars.nginx_vhost.site.domain}}.access.log;
|
|
error_log /var/log/nginx/{{vars.nginx_vhost.site.domain}}.error.log;
|
|
root {{vars.nginx_vhost.site.doc_root}};
|
|
{{{vars.nginx_vhost.site.raw}}}
|
|
|
|
}
|
|
|
|
|
|
{{/vars.nginx_vhost.site.ssl}}
|
|
|
|
|
|
|