#
# !!! This file is managed by Ansible !!!
#

{% if  services.radicale.nginx.sslOnly is not defined or services.radicale.nginx.sslOnly is false %}
server {
	listen 80 ;
	listen [::]:80;
	
	server_name {{ services.radicale.nginx.domain }};

	location / {
		proxy_pass       http://127.0.0.1:{{ services.radicale.port | default(5232) }}/; # The / is important!
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}

	location /infcloud {
		alias /usr/share/webapps/infcloud;
		index index.html;
	}
}

{% endif %}
{% if services.radicale.nginx.ssl.enable is true %}
server {
	listen 443 ssl;
	listen [::]:443 ssl;

	ssl_certificate "{{ services.radicale.nginx.ssl.cert }}";
	ssl_certificate_key "{{ services.radicale.nginx.ssl.privkey }}";
	include /etc/nginx/ssl.conf;
	
	server_name {{ services.radicale.nginx.domain }};

	location / {
		proxy_pass       http://127.0.0.1:{{ services.radicale.port | default(5232) }}/; # The / is important!
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}

	location /infcloud {
		alias /usr/share/webapps/infcloud;
		index index.html;
	}
}
{% endif %}