server { server_name {{var_espe_frontend_zackeneule_and_nginx_domain}}; listen 80; listen [::]:80; {% if var_espe_frontend_zackeneule_and_nginx_tls %} listen [::]:443 ssl http2; listen 443 ssl http2; ssl_certificate /etc/ssl/certs/{{var_espe_frontend_zackeneule_and_nginx_domain}}.pem; ssl_certificate_key /etc/ssl/private/{{var_espe_frontend_zackeneule_and_nginx_domain}}.pem; include /etc/nginx/ssl-hardening.conf; {% endif %} root {{var_espe_frontend_zackeneule_and_nginx_directory}}; }