# {{ ansible_managed }} {{ ansible_date_time.time }} {{ ansible_date_time.date }}
#
server {
	listen 80;
	server_name {{ hostname }};
	return 301 https://$server_name$request_uri;
}

server {
	listen 443 ssl;
	server_name {{ hostname }};

	ssl_certificate /etc/ssl/{{ app_name }}/{{ app_name }}.crt;
	ssl_certificate_key /etc/ssl/{{ app_name }}/local.pem;

	access_log /var/log/nginx/{{ app_name }}.log;
	error_log /var/log/nginx/{{ app_name }}.log;

	location /static/ {
		root /srv/sites/newsreader;
	}

	location / {
		include proxy_params;

		proxy_redirect off;

		proxy_pass http://unix:/run/gunicorn.sock;
	}
}