diff --git a/roles/webgateway/templates/nginx.conf b/roles/webgateway/templates/nginx.conf index 2849714..590a38c 100644 --- a/roles/webgateway/templates/nginx.conf +++ b/roles/webgateway/templates/nginx.conf @@ -1,4 +1,4 @@ -# {{ansible_managed}} +# {{ ansible_managed }} user www-data; worker_processes auto; pid /run/nginx.pid; @@ -71,7 +71,7 @@ http { listen 443 ssl http2; listen [::]:443 ssl http2; server_name {{ proxysite.domain }}; - proxy_ssl_name {{ proxysite.domain}}; + proxy_ssl_name {{ proxysite.domain }}; ssl_certificate /etc/letsencrypt/live/{{ proxysite.domain }}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/{{ proxysite.domain }}/privkey.pem; ssl_stapling on; @@ -79,16 +79,16 @@ http { {%- if proxysite.bigrequests %} client_max_body_size 8G; {%- endif %} + {-% if proxysite.ignorecert %} + proxy_ssl_verify off; + {%- endif %} location /{ proxy_pass https://{{ proxysite.ip }}; - {-% if proxysite.ignorecert %} - proxy_ssl_verify off; - {%- endif %} } location /metrics{ proxy_pass https://{{ proxysite.ip }}; - allow 192.168.69.0/24; - deny all; + allow 192.168.69.0/24; + deny all; } }