# {{ ansible_managed }}

server {
	listen {{ https_port }} ssl;
	server_name {{ newsreader_domain }};

	include snippets/certificates.conf;
	include snippets/ssl-params.conf;

	access_log /var/log/nginx/newsreader.log;
	error_log /var/log/nginx/newsreader.log;

	location / {
		gzip off;

		proxy_read_timeout      90;
		proxy_connect_timeout   90;
		proxy_redirect          off;

		proxy_set_header Host 			$host;
		proxy_set_header X-Real-IP 		$remote_addr;
		proxy_set_header X-Forwarded-For   	$proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Ssl     	on;
		proxy_set_header X-Forwarded-Proto 	$scheme;
		proxy_set_header X-Frame-Options 	SAMEORIGIN;

		proxy_pass 				http://{{ newsreader_ip }}:{{ newsreader_port }};
	}
}