86 lines
2.8 KiB
Text
86 lines
2.8 KiB
Text
{%- if pillar['nginx'][server]['default'] is defined -%}
|
|
{%- set default = pillar['nginx'][server]['default'] -%}
|
|
{%- else -%}
|
|
{%- set default = "yes" -%}
|
|
{%- endif -%}
|
|
{%- set wildcard = "" -%}
|
|
{%- if pillar['nginx'][server]['wildcard'] is defined -%}
|
|
{%- if pillar['nginx'][server]['wildcard'] -%}
|
|
{%- set wildcard = "*." ~ server ~ ".actcur.com" -%}
|
|
{%- endif -%}
|
|
{%- endif -%}
|
|
{%- if pillar['nginx'][server]['https'] is defined -%}
|
|
{%- if pillar['nginx'][server]['https']['port'] is defined-%}
|
|
{%- set port = pillar['nginx'][server]['https']['port'] -%}
|
|
{%- endif -%}
|
|
{%- if pillar['nginx'][server]['https']['port'] is defined-%}
|
|
{%- set prot = pillar['nginx'][server]['https']['prot'] -%}
|
|
{%- else -%}
|
|
{%- set prot = "https" -%}
|
|
{%- endif -%}
|
|
server {
|
|
listen 443;
|
|
server_name {{server}}.actcur.com {{wildcard}};
|
|
|
|
# resolver {{ resolver }};
|
|
set $backend "{{prot}}://127.0.0.1{%- if port is defined -%}:{{port}}{%- endif -%}";
|
|
|
|
ssl on;
|
|
ssl_certificate /etc/nginx/certs/{{server}}.actcur.com/fullchain.pem;
|
|
ssl_certificate_key /etc/nginx/certs/{{server}}.actcur.com/privkey.pem;
|
|
ssl_session_cache shared:SSL:10m;
|
|
client_max_body_size 1024m;
|
|
location / {
|
|
proxy_pass $backend;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header X-Forwarded-Port 443;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $remote_addr;
|
|
proxy_set_header X-Forwarded-Ssl on;
|
|
|
|
{%- if pillar['nginx'][server]['proxy_headers'] is defined -%}
|
|
{%- for header in pillar['nginx'][server]['proxy_headers'] %}
|
|
proxy_set_header {{header}} {{pillar['nginx'][server]['proxy_headers'][header]}};
|
|
{%- endfor %}
|
|
{%- endif %}
|
|
|
|
# re-write redirects to http as to https, example: /home
|
|
proxy_redirect http:// https://;
|
|
}
|
|
|
|
error_log /var/log/nginx/{{server}}_error.log;
|
|
access_log /var/log/nginx/{{server}}_access.log;
|
|
}
|
|
{%- endif -%}
|
|
|
|
|
|
{%- if pillar['nginx'][server]['http'] is defined-%}
|
|
{%- if pillar['nginx'][server]['http']['port'] is defined-%}
|
|
{%- set port = pillar['nginx'][server]['http']['port'] -%}
|
|
{%- endif -%}
|
|
{%- if pillar['nginx'][server]['http']['port'] is defined-%}
|
|
{%- set prot = pillar['nginx'][server]['http']['prot'] -%}
|
|
{%- else -%}
|
|
[%- set prot = "http" -%}
|
|
{%- endif -%}
|
|
server {
|
|
listen 80;
|
|
server_name {{server}}.actcur.com;
|
|
|
|
resolver {{resolver}};
|
|
set $backend "{{prot}}://{{server}}.actcur.com{%- if port is defined -%}:{{port}}{%- endif -%}";
|
|
|
|
location / {
|
|
proxy_pass $backend;
|
|
proxy_set_header Host $host;
|
|
|
|
# re-write redirects to https as to http, example: /home
|
|
proxy_redirect https:// http://;
|
|
|
|
}
|
|
|
|
error_log /var/log/nginx/{{server}}_error.log;
|
|
access_log /var/log/nginx/{{server}}_access.log;
|
|
}
|
|
{%- endif -%}
|