iac
/
ansible-role-nginx-config-svc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add option notls to only print http/80 part

This commit is contained in:
nemunaire 2023-03-15 00:51:54 +01:00
parent d67ccd82fa
commit b35c5b370f
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
templates/nginx.conf.j2
View File

@ -39,7 +39,7 @@ server {
{% endif %} {% endif %}
} }
} }
{%+ if notls is not defined %}
server { server {
{% if nginx_listen443 is defined %} {% if nginx_listen443 is defined %}
{{ nginx_listen443 }} {{ nginx_listen443 }}
@ -65,9 +65,12 @@ server {
{% if ssl_certificate is defined -%} {% if ssl_certificate is defined -%}
{{ ssl_certificate | indent(4) }} {{ ssl_certificate | indent(4) }}
{% else -%} {% elif instance_name is defined -%}
ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt; ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt;
ssl_certificate_key /etc/ssl/private/{{ instance_name }}.pem; ssl_certificate_key /etc/ssl/private/{{ instance_name }}.pem;
{% else -%}
ssl_certificate /etc/ssl/csr/{{ domains[0] }}-fullchain.crt;
ssl_certificate_key /etc/ssl/private/{{ domains[0] }}.pem;
{% endif %} {% endif %}
add_header X-XSS-Protection "0"; add_header X-XSS-Protection "0";
@ -104,6 +107,9 @@ server {
{% if ssl_certificate is defined %} {% if ssl_certificate is defined %}
{{ ssl_certificate }} {{ ssl_certificate }}
{% elif instance_name is defined -%}
ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt;
ssl_certificate_key /etc/ssl/private/{{ instance_name }}.pem;
{% else %} {% else %}
ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt; ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt;
ssl_certificate_key /etc/ssl/private/{{ instance_name }}.pem; ssl_certificate_key /etc/ssl/private/{{ instance_name }}.pem;
@ -117,6 +123,7 @@ ssl_certificate /etc/ssl/csr/{{ instance_name }}-fullchain.crt;
} }
} }
{% endif %} {% endif %}
{% endif %}
{% if after_server is defined %} {% if after_server is defined %}
{{ after_server }} {{ after_server }}
{% endif %} {% endif %}