ubuntu.vhost.conf.j2

server {
    listen 80;
    server_name {{ web.domain }};
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name {{ web.domain }};

    ssl_certificate {{ var_data_path }}/config/http/ssl.crt;
    ssl_certificate_key {{ var_data_path }}/config/http/ssl.pem;

    ssl_protocols TLSv1.2;

    location / {
        include proxy_params;
        proxy_pass https://{{ web.bind_host }}:{{ web.bind_port }}/;
    }
}