Files
@ 91f1fe045f28
Branch filter:
Location: majic-ansible-roles/roles/php_website/templates/nginx_site.j2 - annotation
91f1fe045f28
1.7 KiB
text/plain
MAR-73: Fixed the virtualenv wrapper script in wsgi_website role to properly escape arguments.
dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 dfb91e411e40 7727c37bce67 40473a82c752 7727c37bce67 40473a82c752 7727c37bce67 dfb91e411e40 7727c37bce67 d26fe0368a4b d26fe0368a4b d26fe0368a4b dfb91e411e40 d26fe0368a4b d26fe0368a4b d26fe0368a4b 18cd76ec050d 18cd76ec050d d26fe0368a4b 1b05bae8e440 1b05bae8e440 1b05bae8e440 1b05bae8e440 1b05bae8e440 7f8ef577fa2c 40473a82c752 7727c37bce67 7727c37bce67 7f8ef577fa2c 7f8ef577fa2c 7727c37bce67 40473a82c752 7727c37bce67 40473a82c752 7727c37bce67 7727c37bce67 7727c37bce67 7f8ef577fa2c 40473a82c752 40473a82c752 40473a82c752 40473a82c752 40473a82c752 40473a82c752 40473a82c752 7727c37bce67 40473a82c752 222008c85003 97be416e882e 40473a82c752 40473a82c752 40473a82c752 40473a82c752 40473a82c752 7f8ef577fa2c 7f8ef577fa2c 7f8ef577fa2c 7727c37bce67 7f8ef577fa2c 7727c37bce67 7727c37bce67 7727c37bce67 7727c37bce67 | {% if enforce_https -%}
server {
# HTTP (plaintext) configuration.
listen 80;
server_name {{ fqdn }};
# Redirect plaintext connections to HTTPS
return 301 https://$host$request_uri;
}
{% endif -%}
server {
# Base settings.
root {{ home }}/htdocs/;
index {{ index }};
server_name {{ fqdn }};
{% if not enforce_https %}
# HTTP (plaintext) configuration.
listen 80;
{% endif %}
# HTTPS (TLS) configuration.
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate_key /etc/ssl/private/{{ fqdn }}_https.key;
ssl_certificate /etc/ssl/certs/{{ fqdn }}_https.pem;
{% for config in additional_nginx_config -%}
# {{ config.comment }}
{{ config.value }}
{% endfor -%}
{% if rewrites -%}
# Generic URL rewrites.
{% for rewrite in rewrites -%}
rewrite {{ rewrite }};
{% endfor -%}
{% endif %}
{% if deny_files_regex -%}
# Deny access to user-specified files.
{% for regex in deny_files_regex -%}
location ~ {{ regex }} {
deny all;
}
{% endfor -%}
{% endif %}
# Interpret PHP files via FastCGI.
location ~ {{ php_file_regex }} {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php5-fpm/{{ fqdn }}.sock;
}
# Serve the files.
location ~ /(.+) {
try_files $uri $uri/{% if php_rewrite_urls %} @php_rewrite{% else %} =404{% endif %};
}
{% if php_rewrite_urls -%}
# Apply URL rewrites.
location @php_rewrite {
{% for rewrite in php_rewrite_urls %}
rewrite {{ rewrite }};
{% endfor -%}
}
{% endif -%}
access_log /var/log/nginx/{{ fqdn }}-access.log;
error_log /var/log/nginx/{{ fqdn }}-error.log;
}
|