ansible-role-zammad/templates/nginx-rp-site.j2

server {
    listen 80;
    server_name {{ zammad_domain }};
    include snippets/letsencrypt.conf;
    location / { return 301 https://$http_host$request_uri; }
}

server {
    listen 443 ssl http2;
    server_name {{ zammad_domain }};
    ssl_certificate /var/lib/dehydrated/certs/{{ zammad_domain }}/fullchain.pem;
    ssl_certificate_key /var/lib/dehydrated/certs/{{ zammad_domain }}/privkey.pem;
    include /etc/nginx/snippets/add_headers.conf;
    location /cable {
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://{{ inventory_hostname }}:80;
    }
    location /ws {
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://{{ inventory_hostname }}:80;
    }
    location / {
        proxy_pass http://{{ inventory_hostname }}:80;
    }
}