48 lines
1.0 KiB
Django/Jinja
48 lines
1.0 KiB
Django/Jinja
{{ ansible_header | comment }}
|
|
|
|
{% for dname in reverseproxy.redirect_dnames %}
|
|
{% for site in reverseproxy.reverseproxy_sites %}
|
|
{% set from = site.from | regex_replace('crans.org', dname) %}
|
|
{% set to = site.from %}
|
|
{% if from != site.from %}
|
|
# Redirect http://{{ from }} to http://{{ to }}
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
server_name {{ from }};
|
|
|
|
{% for realip in nginx.real_ip_from %}
|
|
set_real_ip_from {{ realip }};
|
|
{% endfor %}
|
|
real_ip_header X-Real-Ip;
|
|
|
|
location / {
|
|
return 302 http://{{ to }}$request_uri;
|
|
}
|
|
}
|
|
|
|
# Redirect https://{{ from }} to https://{{ to }}
|
|
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
|
|
server_name {{ from }};
|
|
|
|
# SSL common conf
|
|
include "/etc/nginx/snippets/options-ssl.{{ site.ssl|default(nginx.default_ssl_domain) }}.conf";
|
|
|
|
{% for realip in nginx.real_ip_from %}
|
|
set_real_ip_from {{ realip }};
|
|
{% endfor %}
|
|
real_ip_header X-Real-Ip;
|
|
|
|
location / {
|
|
return 302 https://{{ to }}$request_uri;
|
|
}
|
|
}
|
|
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% endfor %}
|