ansible-roles/webapps/hedgedoc/templates/vhost.conf.j2

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
  listen 80;
  listen [::]:80;
  server_name {{ domains |first }};
  
  # For certbot
  include /etc/nginx/snippets/letsencrypt.conf;

  {% if ssl.stat.exists %}
  location / { return 301 https://$host$request_uri; }
  {% endif %}
}

{% if ssl.stat.exists %}
server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;

  server_name {{ domains |first }};

  access_log /var/log/nginx/{{ service }}.access.log;
  error_log  /var/log/nginx/{{ service }}.error.log;
  
  include /etc/nginx/snippets/letsencrypt.conf;
  include /etc/nginx/ssl/{{ domains | first }}.conf;

  location / {
      proxy_pass http://127.0.0.1:{{ node_port }};
      proxy_set_header Host $host; 
      proxy_set_header X-Real-IP $remote_addr; 
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
      proxy_set_header X-Forwarded-Proto $scheme;
  }

  location /socket.io/ {
      proxy_pass http://127.0.0.1:{{ node_port }};
      proxy_set_header Host $host; 
      proxy_set_header X-Real-IP $remote_addr; 
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection $connection_upgrade;
  } 
}
{% endif %}