ansible-roles/webapps/gitea/templates/vhost.conf.j2

upstream gitea_{{ service }} {
    server unix:/home/{{ service }}/gitea.sock;
}

server {
  listen 80;
  listen [::]:80;
  server_name {{ domains | first }};
  
  # For certbot
  include /etc/nginx/snippets/letsencrypt.conf;
 
  {% if ssl.stat.exists %}
  location / { return 301 https://$host$request_uri; }
  {% endif %}
}

{% if ssl.stat.exists %}
server {
    listen 0.0.0.0:443 ssl http2;
    listen [::]:443 ssl http2;

    server_name {{ domains | first }};
    
    access_log /var/log/nginx/{{ service }}.access.log;
    error_log  /var/log/nginx/{{ service }}.error.log;

    include /etc/nginx/snippets/letsencrypt.conf;
    include /etc/nginx/ssl/{{ domains | first }}.conf;

    location / {
        proxy_pass http://gitea_{{ service }};
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_read_timeout 10;
    }
}
{% endif %}