Robert Kaussow
5c5f2b82e4
All checks were successful
continuous-integration/drone/push Build is passing
68 lines
2.3 KiB
Django/Jinja
68 lines
2.3 KiB
Django/Jinja
#jinja2: lstrip_blocks: True
|
|
{{ ansible_managed | comment }}
|
|
|
|
{% if item.upstream is defined and item.upstream %}
|
|
upstream {{ item.upstream.name }} {
|
|
{% for upserver in item.upstream.servers %}
|
|
server {{ upserver }};
|
|
{% endfor %}
|
|
}
|
|
{% endif %}
|
|
{% for server in item.servers %}
|
|
|
|
server {
|
|
listen {{ server.port }}{{ ' ssl' if server.tls is defined and server.tls else '' }};
|
|
{% if not server.server_name is string and server.server_name is iterable %}
|
|
server_name {{ server.server_name | join(" ") }};
|
|
{% else %}
|
|
server_name {{ server.server_name }};
|
|
{% endif %}
|
|
{% if server.tls is defined and server.tls %}
|
|
|
|
ssl_certificate /etc/pki/tls/certs/{{ server.tls.cert }};
|
|
ssl_certificate_key /etc/pki/tls/private/{{ server.tls.key }};
|
|
{% if server.tls.dhparam is defined %}
|
|
ssl_dhparam {{ item.value.ssl.dhparam }};
|
|
{% endif %}
|
|
{% endif %}
|
|
{% if server.tls_redirect | default(False) %}
|
|
|
|
return 301 https://{% if server.tls_redirect_url is defined %}{{ server.tls_redirect_url }}{% else %}$server_name{% endif %}$request_uri;
|
|
{% else %}
|
|
{% if server.client_max_body_size is defined and server.client_max_body_size %}
|
|
client_max_body_size {{ server.client_max_body_size }};
|
|
{% endif %}
|
|
|
|
{% for location in server.locations %}
|
|
location {{ location.match }} {
|
|
{% if location.root is defined and location.root %}
|
|
root {{ location.root }};
|
|
{% endif %}
|
|
{% if location.index is defined and location.index %}
|
|
index {{ location.index }};
|
|
|
|
{% endif %}
|
|
{% if location.proxy_pass is defined and location.proxy_pass %}
|
|
proxy_pass {{ location.proxy_pass }};
|
|
{% if location.proxy_http_version is defined and location.proxy_http_version %}
|
|
proxy_http_version {{ location.proxy_http_version }};
|
|
{% endif %}
|
|
{% if location.proxy_headers is defined and location.proxy_headers %}
|
|
|
|
{% for pheader in location.proxy_headers %}
|
|
proxy_set_header {{ pheader }};
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% endif %}
|
|
}
|
|
|
|
{% endfor %}
|
|
# redirect server error pages to the static page /50x.html
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root {{ item.error_page | default("/usr/share/nginx/html") }};
|
|
}
|
|
{% endif %}
|
|
}
|
|
{% endfor %}
|