ansible-role-nextcloud/templates/nginx_site.j2

56 lines
1.8 KiB
Text
Raw Normal View History

2020-12-03 15:52:14 +01:00
server {
listen 80;
server_name {{ instance.name }};
2021-10-14 16:09:47 +02:00
{% if instance.alias is defined %}
{% for alias in instance.alias %}
server_name {{ alias }};
{% endfor %}
2021-06-26 02:32:29 +02:00
{% endif %}
2020-12-03 15:52:14 +01:00
include snippets/letsencrypt.conf;
location / { return 301 https://$http_host$request_uri; }
}
server {
2021-06-26 02:32:29 +02:00
listen 443 ssl http2;
server_name {{ instance.name }};
ssl_certificate /var/lib/dehydrated/certs/{{ instance.name }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ instance.name }}/privkey.pem;
2020-12-03 15:52:14 +01:00
include /etc/nginx/proxy_params;
add_header Referrer-Policy $referrerpolicy;
add_header Strict-Transport-Security $sts;
add_header X-Content-Type-Options $xcontentoptions;
add_header X-XSS-Protection $xxssprotection;
location ~ /.well-known/(carddav|caldav) {
return 301 $scheme://$host/remote.php/dav;
}
location ~ \.* {
proxy_pass http://{{ inventory_hostname }}:80;
}
2021-06-26 02:32:29 +02:00
}
{% if instance.alias is defined %}
2021-10-14 16:09:47 +02:00
{% for alias in instance.alias %}
2021-06-26 02:32:29 +02:00
server {
listen 443 ssl http2;
2021-10-14 16:09:47 +02:00
server_name {{ alias }};
ssl_certificate /var/lib/dehydrated/certs/{{ alias }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ alias }}/privkey.pem;
2021-06-26 02:32:29 +02:00
include /etc/nginx/proxy_params;
add_header Referrer-Policy $referrerpolicy;
add_header Strict-Transport-Security $sts;
add_header X-Content-Type-Options $xcontentoptions;
add_header X-XSS-Protection $xxssprotection;
location ~ /.well-known/(carddav|caldav) {
return 301 $scheme://$host/remote.php/dav;
}
location ~ \.* {
proxy_pass http://{{ inventory_hostname }}:80;
}
}
2021-10-14 16:09:47 +02:00
{% endfor %}
{% endif %}