#
# !!! This file is managed by Ansible !!!
#

{% if  services.pleroma.nginx.sslOnly is not defined or services.pleroma.nginx.sslOnly is false %}
server {
	listen 80 ;
	listen [::]:80;
	
	server_name {{ services.pleroma.nginx.domain }};

	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
   	gzip_buffers 16 8k;
	gzip_http_version 1.1;
	gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/activity+json application/atom+xml;

	client_max_body_size 150m;
	ignore_invalid_headers off;


	location / {
		proxy_pass http://127.0.0.1:4000/;
		include /etc/nginx/proxy.conf;
	}

	{% if services.pleroma.nginx.extraConfig is defined %}
	{{ services.pleroma.nginx.extraConfig }}
	{% endif %}
}

{% endif %}
{% if services.pleroma.nginx.ssl.enable is true %}
server {
	listen 443 ssl;
	listen [::]:443 ssl;

	ssl_certificate "{{ services.pleroma.nginx.ssl.cert }}";
	ssl_certificate_key "{{ services.pleroma.nginx.ssl.privkey }}";
	include /etc/nginx/ssl.conf;
	
	server_name {{ services.pleroma.nginx.domain }};

	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
   	gzip_buffers 16 8k;
	gzip_http_version 1.1;
	gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/activity+json application/atom+xml;

	client_max_body_size 150m;
	ignore_invalid_headers off;


	location / {
		proxy_pass http://127.0.0.1:4000/;
		include /etc/nginx/proxy.conf;
	}

	{% if services.pleroma.nginx.extraConfig is defined %}
	{{ services.pleroma.nginx.extraConfig }}
	{% endif %}
}
{% endif %}