34 lines
964 B
Django/Jinja
34 lines
964 B
Django/Jinja
$HTTP["host"] == "{{domain}}" {
|
|
server.name = "{{domain}}"
|
|
server.document-root = "{{directory}}"
|
|
|
|
# Anfragen auf Port 80 über IPv4
|
|
$SERVER["socket"] == ":80" {
|
|
# auf HTTPS umleiten
|
|
url.redirect = ("^/(.*)" => "https://{{domain}}/$1")
|
|
}
|
|
|
|
# Anfragen auf Port 80 über IPv6
|
|
$SERVER["socket"] == "[::]:80" {
|
|
# auf HTTPS umleiten
|
|
url.redirect = ("^/(.*)" => "https://{{domain}}/$1")
|
|
}
|
|
|
|
# Anfragen auf Port 443 über IPv4
|
|
$SERVER["socket"] == ":443" {
|
|
# mit dem SSL-Kram beglücken
|
|
ssl.engine = "enable"
|
|
ssl.pemfile = "/etc/ssl/certs/{{domain}}.pem"
|
|
ssl.privkey = "/etc/ssl/keys/{{domain}}.pem"
|
|
ssl.ca-file = "/etc/ssl/fullchains/{{domain}}.pem"
|
|
}
|
|
|
|
# Anfragen auf Port 443 über IPv6
|
|
$SERVER["socket"] == "[::]:443" {
|
|
# mit dem SSL-Kram beglücken
|
|
ssl.engine = "enable"
|
|
ssl.pemfile = "/etc/ssl/certs/{{domain}}.pem"
|
|
ssl.privkey = "/etc/ssl/keys/{{domain}}.pem"
|
|
ssl.ca-file = "/etc/ssl/fullchains/{{domain}}.pem"
|
|
}
|
|
}
|