{%- if pillar['nginx'][server]['default'] is defined -%}
  {%- set default = pillar['nginx'][server]['default'] -%}
{%- else -%}
  {%- set default = "yes" -%}
{%- endif -%}
{%- set wildcard = "" -%}
{%- if pillar['nginx'][server]['wildcard'] is defined -%}
  {%- if pillar['nginx'][server]['wildcard'] -%}
    {%- set wildcard = "*." ~ server ~ ".actcur.com" -%}
  {%- endif -%}
{%- endif -%}
{%- if pillar['nginx'][server]['https'] is defined -%}
  {%- if pillar['nginx'][server]['https']['port'] is defined-%}
    {%- set port = pillar['nginx'][server]['https']['port'] -%}
  {%- endif -%}
  {%- if pillar['nginx'][server]['https']['port'] is defined-%}
    {%- set prot = pillar['nginx'][server]['https']['prot'] -%}
  {%- else -%}
    {%- set prot = "https" -%}
  {%- endif -%}
server {
  listen 443;
  server_name {{server}}.actcur.com {{wildcard}};

#  resolver {{ resolver }};
  set $backend "{{prot}}://127.0.0.1{%- if port is defined -%}:{{port}}{%- endif -%}";

  ssl on;
  ssl_certificate /etc/nginx/certs/{{server}}.actcur.com/fullchain.pem;
  ssl_certificate_key /etc/nginx/certs/{{server}}.actcur.com/privkey.pem;
  ssl_session_cache shared:SSL:10m;
  client_max_body_size 1024m;
  location / {
    proxy_pass $backend;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header X-Forwarded-Port 443;
    proxy_set_header X-Real-IP  $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Forwarded-Ssl on;

{%- if pillar['nginx'][server]['proxy_headers'] is defined -%}
  {%- for header in pillar['nginx'][server]['proxy_headers'] %}
    proxy_set_header {{header}} {{pillar['nginx'][server]['proxy_headers'][header]}};
  {%- endfor %}
{%- endif %}

    # re-write redirects to http as to https, example: /home
    proxy_redirect http:// https://;
  }

  error_log /var/log/nginx/{{server}}_error.log;
  access_log /var/log/nginx/{{server}}_access.log;
}
{%- endif -%}


{%- if pillar['nginx'][server]['http'] is defined-%}
  {%- if pillar['nginx'][server]['http']['port'] is defined-%}
    {%- set port = pillar['nginx'][server]['http']['port'] -%}
  {%- endif -%}
  {%- if pillar['nginx'][server]['http']['port'] is defined-%}
    {%- set prot = pillar['nginx'][server]['http']['prot'] -%}
  {%- else -%}
    [%- set prot = "http" -%}
  {%- endif -%}
server {
  listen 80;
  server_name {{server}}.actcur.com;

  resolver {{resolver}};
  set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}";

  location / {
    proxy_pass $backend;
    proxy_set_header Host $host;

    # re-write redirects to https as to http, example: /home
    proxy_redirect https:// http://;

  }

  error_log /var/log/nginx/{{server}}_error.log;
  access_log /var/log/nginx/{{server}}_access.log;
}
{%- endif -%}