#
# !!! This file is managed by Ansible !!!
#

{% if  services.ctucxGallery.nginx.sslOnly is not defined or services.ctucxGallery.nginx.sslOnly is false %}
server {
	listen 80 ;
	listen [::]:80;
	
	server_name {{ services.ctucxGallery.nginx.domain }};

	root {{ services.ctucxGallery.targetDir }};

	location ~* \.(html)$ {
		add_header Last-Modified $date_gmt;
		add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
		if_modified_since off;
		expires off;
		etag off;
	}
}

{% endif %}
{% if services.ctucxGallery.nginx.ssl.enable is true %}
server {
	listen 443 ssl;
	listen [::]:443 ssl;

	ssl_certificate "{{ services.ctucxGallery.nginx.ssl.cert }}";
	ssl_certificate_key "{{ services.ctucxGallery.nginx.ssl.privkey }}";
	include /etc/nginx/ssl.conf;
	
	server_name {{ services.ctucxGallery.nginx.domain }};

	root {{ services.ctucxGallery.targetDir }};

	location ~* \.(html)$ {
		add_header Last-Modified $date_gmt;
		add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
		if_modified_since off;
		expires off;
		etag off;
	}
}
{% endif %}