37 lines
921 B
Django/Jinja
37 lines
921 B
Django/Jinja
{% macro davina_backend_common() %}
|
|
location / {
|
|
include fastcgi_params;
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_param REDIRECT_STATUS 200;
|
|
fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
|
|
}
|
|
{% endmacro %}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
server_name {{var_davina_backend_and_nginx_domain}};
|
|
|
|
{% if var_davina_backend_and_nginx_tls_mode == 'force' %}
|
|
return 301 https://$http_host$request_uri;
|
|
{% else %}
|
|
{{ davina_backend_common() }}
|
|
{% endif %}
|
|
}
|
|
|
|
{% if var_davina_backend_and_nginx_tls_mode != 'disable' %}
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
|
|
server_name {{var_davina_backend_and_nginx_domain}};
|
|
|
|
ssl_certificate_key /etc/ssl/private/{{var_davina_backend_and_nginx_domain}}.pem;
|
|
ssl_certificate /etc/ssl/fullchains/{{var_davina_backend_and_nginx_domain}}.pem;
|
|
include /etc/nginx/ssl-hardening.conf;
|
|
|
|
{{ davina_backend_common() }}
|
|
}
|
|
{% endif %}
|