infrastructure/roles/espe_frontend-and-nginx/templates/conf.j2

server {
	server_name {{var_espe_frontend_and_nginx_domain}};
	
	listen 80;
	listen [::]:80;
{% if var_espe_frontend_and_nginx_tls %}
	listen [::]:443 ssl http2;
	listen 443 ssl http2;
	
	ssl_certificate /etc/ssl/certs/{{var_espe_frontend_and_nginx_domain}}.pem;
	ssl_certificate_key /etc/ssl/private/{{var_espe_frontend_and_nginx_domain}}.pem;
	include /etc/nginx/ssl-hardening.conf;
{% endif %}
	
	root {{var_espe_frontend_and_nginx_directory}};
}