1
0
mirror of https://github.com/krislamo/vagrant-easyredmine synced 2024-11-10 06:50:35 +00:00
vagrant-easyredmine/roles/easyredmine/templates/nginx.conf.j2
2016-04-20 16:27:32 -04:00

30 lines
1.1 KiB
Django/Jinja

server {
listen 80;
{% if is_production_vm %}
server_name redmine.apidb.org;
{% else %}
server_name {{ ansible_fqdn }};
{% endif %}
return 301 https://$host$request_uri;
}
server {
listen 443;
{% if is_production_vm %}
server_name redmine.apidb.org;
{% else %}
server_name {{ ansible_fqdn }};
{% endif %}
ssl on;
ssl_certificate /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
ssl_certificate_key /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:!DSS:!DH+3DES;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
root {{ redmine_root_dir }}/public;
passenger_enabled on;
client_max_body_size 50M;
}