{%- if pillar['nginx'][server]['default'] is defined -%} {%- set default = pillar['nginx'][server]['default'] -%} {%- else -%} {%- set default = "yes" -%} {%- endif -%} {%- if pillar['nginx'][server]['https'] is defined -%} {%- if pillar['nginx'][server]['https']['port'] is defined-%} {%- set port = pillar['nginx'][server]['https']['port'] -%} {%- endif -%} {%- if pillar['nginx'][server]['https']['port'] is defined-%} {%- set prot = pillar['nginx'][server]['https']['prot'] -%} {%- else -%} {%- set prot = "https" -%} {%- endif -%} server { listen 443; server_name {{server}}.actcur.com; resolver {{ resolver }}; set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}"; ssl on; ssl_certificate /etc/nginx/certs/{{server}}.actcur.com/fullchain.pem; ssl_certificate_key /etc/nginx/certs/{{server}}.actcur.com/privkey.pem; ssl_session_cache shared:SSL:10m; client_max_body_size 1024m; location / { proxy_pass $backend; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Ssl on; # re-write redirects to http as to https, example: /home proxy_redirect http:// https://; } error_log /var/log/nginx/{{server}}_error.log; access_log /var/log/nginx/{{server}}_access.log; } {%- endif -%} {%- if pillar['nginx'][server]['http'] is defined-%} {%- if pillar['nginx'][server]['http']['port'] is defined-%} {%- set port = pillar['nginx'][server]['http']['port'] -%} {%- endif -%} {%- if pillar['nginx'][server]['http']['port'] is defined-%} {%- set prot = pillar['nginx'][server]['http']['prot'] -%} {%- else -%} [%- set prot = "http" -%} {%- endif -%} server { listen 80; server_name {{server}}.actcur.com; resolver {{resolver}}; set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}"; location / { proxy_pass $backend; proxy_set_header Host $host; # re-write redirects to https as to http, example: /home proxy_redirect https:// http://; } error_log /var/log/nginx/{{server}}_error.log; access_log /var/log/nginx/{{server}}_access.log; } {%- endif -%}