40 lines
1.6 KiB
Django/Jinja
40 lines
1.6 KiB
Django/Jinja
#####################################################
|
|
# The Zen Garden Network #
|
|
# #
|
|
# Configuration : {{ proxy_site_conf_dir }}/{{ item.key }}.conf #
|
|
# Version : {{ proxy_site_version }}-{{ proxy_site_revision }} #
|
|
# #
|
|
# Chris H. <chris@thezengarden.net> #
|
|
#####################################################
|
|
|
|
|
|
### Configuration for: {{ item.key }}
|
|
################################################
|
|
server {
|
|
listen 443 ssl;
|
|
server_name {{ item.key }} {% if proxy_sites[item.key]['aliases'] is defined %}{{ proxy_sites[item.key]['aliases'] }}{% endif %};
|
|
|
|
ssl_certificate {{ proxy_sites[item.key]['ssl_cert'] | default(proxy_site_ssl_certificate) }};
|
|
ssl_certificate_key {{ proxy_sites[item.key]['ssl_key'] | default(proxy_site_ssl_certificate_key) }};
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_protocols {{ proxy_site_ssl_protocols }};
|
|
ssl_ciphers {{ proxy_site_ssl_ciphers }};
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
access_log {{ proxy_site_log_path }}/{{ item.key }}.log;
|
|
|
|
location / {
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Host $host;
|
|
|
|
proxy_pass {{ proxy_sites[item.key]['proto'] }}://{{ proxy_sites[item.key]['dest'] }}:{{ proxy_sites[item.key]['port'] }};
|
|
|
|
|
|
# re-write redirects to http as to https
|
|
proxy_redirect http:// https://;
|
|
}
|
|
}
|