{%- if pillar['nginx'][server]['https'] is defined -%}
  {%- if pillar['nginx'][server]['https']['port'] is defined-%}
    {%- set port = pillar['nginx'][server]['https']['port'] -%}
  {%- endif -%}
  {%- if pillar['nginx'][server]['https']['port'] is defined-%}
    {%- set prot = pillar['nginx'][server]['https']['prot'] -%}
  {%- else -%}
    [%- set prot = "https" -%}
  {%- endif -%}
server {
    listen 443;
    server_name {{server}}.actcur.com;

    resolver {{ resolver }};
    set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}";

    ssl on;
    ssl_certificate /etc/nginx/certs/{{server}}.actcur.com/cert.pem;
    ssl_certificate_key /etc/nginx/certs/{{server}}.actcur.com/privkey.pem;
    ssl_session_cache shared:SSL:10m;

    location / {
        proxy_pass $backend;
        proxy_set_header Host $host;

        # re-write redirects to http as to https, example: /home
        proxy_redirect http:// https://;
    }
}
{%- endif -%}


{%- if pillar['nginx'][server]['http'] is defined-%}
  {%- if pillar['nginx'][server]['http']['port'] is defined-%}
    {%- set port = pillar['nginx'][server]['http']['port'] -%}
  {%- endif -%}
  {%- if pillar['nginx'][server]['http']['port'] is defined-%}
    {%- set prot = pillar['nginx'][server]['http']['prot'] -%}
  {%- else -%}
    [%- set prot = "http" -%}
  {%- endif -%}
server {
    listen 80;
    server_name {{server}}.actcur.com;

    resolver {{resolver}};
    set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}";

    location / {
        proxy_pass $backend;
        proxy_set_header Host $host;

        # re-write redirects to https as to http, example: /home
        proxy_redirect https:// http://;

    }
}
{% else %}
server {
    listen 80 default_server;
    server_name _;
    rewrite ^ https://$host$request_uri? permanent;
}
{%- endif -%}