diff --git a/smartgears/smartgears-nginx-frontend/templates/tagme.d4science.org-virtualhost.j2 b/smartgears/smartgears-nginx-frontend/templates/tagme.d4science.org-virtualhost.j2 deleted file mode 100644 index 40cc4a32..00000000 --- a/smartgears/smartgears-nginx-frontend/templates/tagme.d4science.org-virtualhost.j2 +++ /dev/null @@ -1,139 +0,0 @@ -server { - listen {{ http_port }}; -{% if letsencrypt_acme_install is defined and letsencrypt_acme_install %} - location ^~ /.well-known/acme-challenge { - proxy_pass http://127.0.0.1:{{ letsencrypt_acme_standalone_port }}/.well-known/acme-challenge; - access_log /var/log/nginx/letsencrypt_access.log; - error_log /var/log/nginx/letsencrypt_error.log; - } -{% endif %} -{% if not http_ssl_enabled %} - server_name {{ ansible_fqdn }}; - client_max_body_size 100M; - - # This is the default for nginx on Ubuntu 14.04 - root /usr/share/nginx/html/; - - # redirect server error pages to the static page /50x.html - # - error_page 500 502 503 504 /50x.html; - location = /50x.html { - root /usr/share/nginx/html; - } - - location = /favicon.ico { - log_not_found off; - access_log off; - } - - location = /robots.txt { - allow all; - log_not_found off; - access_log off; - } - - # don't send the nginx version number in error pages and Server header - server_tokens off; - - # Proxy stuff - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_buffer_size {{ nginx_proxy_buffer_size }}; - proxy_buffers {{ nginx_proxy_buffers }}; - proxy_busy_buffers_size {{ nginx_proxy_busy_buffers_size }}; - proxy_set_header X-Forwarded-Host $remote_addr; - proxy_set_header X-Forwarded-Server $host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_http_version 1.1; - proxy_redirect {{ nginx_proxy_redirect }}; - proxy_buffering {{ nginx_proxy_buffering }}; - proxy_connect_timeout {{ nginx_proxy_connect_timeout }}; - proxy_read_timeout {{ nginx_proxy_read_timeout }}; - proxy_send_timeout {{ nginx_proxy_send_timeout }}; -{% for instance in tomcat_m_instances %} -{% for context in instance.app_contexts %} - location /{{ context }} { - proxy_pass http://localhost:{{ item.http_port }}/{{ context }}; - } -{% endfor %} -{% endfor %} - location / { - proxy_pass http://localhost:{{ smartgears_http_port }}; - } -{% else %} - return 301 https://{{ ansible_fqdn }}$request_uri; -{% endif %} - -} - -{% if http_ssl_enabled %} -server { - listen {{ https_port }} ssl; - - server_name {{ ansible_fqdn }}; - client_max_body_size 100M; - access_log /var/log/nginx/access_ssl.log; - error_log /var/log/nginx/error_ssl.log; - - # This is the default for nginx on Ubuntu 14.04 - root /usr/share/nginx/html/; - - ssl_certificate {{ letsencrypt_acme_certs_dir }}/fullchain; - ssl_certificate_key {{ letsencrypt_acme_certs_dir }}/privkey; - ssl_session_cache shared:SSL:10m; - ssl_session_timeout 10m; - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA"; - ssl_prefer_server_ciphers on; - ssl_stapling on; - ssl_stapling_verify on; - add_header Strict-Transport-Security max-age=15768000; - - # redirect server error pages to the static page /50x.html - # - error_page 500 502 503 504 /50x.html; - location = /50x.html { - root /usr/share/nginx/html; - } - - location = /favicon.ico { - log_not_found off; - access_log off; - } - - location = /robots.txt { - allow all; - log_not_found off; - access_log off; - } - - # don't send the nginx version number in error pages and Server header - server_tokens off; - - # Proxy stuff - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_buffer_size {{ nginx_proxy_buffer_size }}; - proxy_buffers {{ nginx_proxy_buffers }}; - proxy_busy_buffers_size {{ nginx_proxy_busy_buffers_size }}; - proxy_set_header X-Forwarded-Host $remote_addr; - proxy_set_header X-Forwarded-Server $host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_http_version 1.1; - proxy_redirect {{ nginx_proxy_redirect }}; - proxy_buffering {{ nginx_proxy_buffering }}; - proxy_connect_timeout {{ nginx_proxy_connect_timeout }}; - proxy_read_timeout {{ nginx_proxy_read_timeout }}; - proxy_send_timeout {{ nginx_proxy_send_timeout }}; -{% for instance in tomcat_m_instances %} -{% for context in instance.app_contexts %} - location /{{ context }} { - proxy_pass http://localhost:{{ item.http_port }}/{{ context }}; - } -{% endfor %} -{% endfor %} - location / { - proxy_pass http://localhost:{{ smartgears_http_port }}; - } -} -{% endif %}