eletrotupi / tcc/ ansible/roles/nginx/templates/site.https.j23a9bb1a4b14edcfdaa020cfe24a371c731f83cc0
1.6 KB | 61 lines Raw
1
server {
2
    listen 80;
3
    server_name {{ vhosts[0] }};
4
5
    location ^~ /.well-known {
6
        root /var/www;
7
    }
8
9
    location / {
10
        return 302 https://$host$request_uri;
11
    }
12
}
13
14
server {
15
    listen 443 ssl;
16
    listen [::]:443 ssl;
17
18
    server_name {{ vhosts[0] }};
19
20
    ssl_certificate {{ nginx_cert_dir }}/{{ vhosts[0] }}/cert.pem;
21
    ssl_certificate_key {{ nginx_cert_dir }}/private/{{ vhosts[0] }}/key.pem;
22
23
    ssl_protocols TLSv1.2 TLSv1.3;
24
25
    add_header X-Clacks-Overhead "GNU Terry Pratchett";
26
    add_header Permissions-Policy interest-cohort=();
27
28
    location = /monografia {
29
        alias {{ nginx_static_root }}/monografia.pdf;
30
        add_header Content-Type application/pdf;
31
        add_header Content-Disposition "inline";
32
    }
33
34
    location = /logs {
35
        return 302 /logs/select/vmui/;
36
    }
37
38
    location /logs/ {
39
        auth_basic "nexo logs";
40
        auth_basic_user_file {{ nginx_logs_htpasswd_file }};
41
42
        proxy_pass {{ nginx_logs_proxy_pass }};
43
        proxy_set_header Host $host;
44
        proxy_set_header X-Real-IP $remote_addr;
45
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
46
        proxy_set_header X-Forwarded-Proto $scheme;
47
    }
48
49
    location / {
50
        proxy_pass {{ nginx_proxy_pass }};
51
        proxy_set_header Host $host;
52
        proxy_set_header X-Real-IP $remote_addr;
53
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
54
        proxy_set_header X-Forwarded-Proto $scheme;
55
        proxy_set_header X-Forwarded-Host $host;
56
    }
57
58
    location ^~ /.well-known {
59
        root /var/www;
60
    }
61
}