############################################ # config file for ${name_site} ############################################ upstream ${name_site}_backend { server ${name_service}; server 1.1.1.1 backup; } server { server_name ${name_site}.tryton.geeraert.eu www.${name_site}.tryton.geeraert.eu; location / { proxy_pass http://${name_site}_backend; %{ if proxy_cache} location ~* \.(html|css|jpg|gif|ico|js)$ { proxy_cache cache; proxy_cache_key $host$uri$is_args$args; proxy_cache_valid 200 301 302 30m; expires 30m; proxy_pass http://${name_site}_backend; } %{ endif } } location /.well-known/acme-challenge/ { root /var/www/certbot; } %{ if extra_value_bool} ${extra-value} %{ endif } %{ if http2_bool} http2 on; ssl_protocols TLSv1.2; %{ endif } listen 443 ssl; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; } server { if ($host = www.${name_site}.tryton.geeraert.eu) { return 301 https://$host$request_uri; } if ($host = ${name_site}.tryton.geeraert.eu) { return 301 https://$host$request_uri; } server_name www.${name_site}.tryton.geeraert.eu ${name_site}.tryton.geeraert.eu; listen 80; return 404; }