[mod] role:espe_backend-and-nginx

This commit is contained in:
roydfalk 2024-06-09 11:15:53 +02:00
parent 9f624135c7
commit ee3d7d3a4e
2 changed files with 4 additions and 1 deletions

View file

@ -1,4 +1,5 @@
{
"var_espe_backend_and_nginx_domain": "espe.example.org",
"var_espe_backend_and_nginx_port": 4916
"var_espe_backend_and_nginx_port": 4916,
"var_espe_backend_and_nginx_tls": true
}

View file

@ -8,12 +8,14 @@ server {
listen 80;
listen [::]:80;
{% if var_espe_backend_and_nginx_tls %}
listen [::]:443 ssl http2;
listen 443 ssl http2;
ssl_certificate /etc/ssl/certs/{{var_espe_backend_and_nginx_domain}}.pem;
ssl_certificate_key /etc/ssl/private/{{var_espe_backend_and_nginx_domain}}.pem;
include /etc/nginx/ssl-hardening.conf;
{% endif %}
location / {
proxy_pass http://localhost:{{var_espe_backend_and_nginx_port | string}};