Browse Source

Merge branch 'master' of git.thengo.net:ka/ansible-role-nextcloud

master
parent
commit
31940da73f
2 changed files with 6 additions and 4 deletions
  1. +1
    -1
      defaults/main.yml
  2. +5
    -3
      templates/nginx-vhost.conf.j2

+ 1
- 1
defaults/main.yml View File

@@ -35,4 +35,4 @@ nextcloud_php_version: 7.3


nextcloud_reset_lib_directory: true nextcloud_reset_lib_directory: true


nextcloud_webserver: nginx
nextcloud_webserver: apache2

+ 5
- 3
templates/nginx-vhost.conf.j2 View File

@@ -8,6 +8,11 @@ server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name {{nextcloud_server_names|join(' ')}}; server_name {{nextcloud_server_names|join(' ')}};
location /.well-known/acme-challenge {
default_type "text/plain";
root /var/www/default;
}


# enforce https # enforce https
return 301 https://$server_name:443$request_uri; return 301 https://$server_name:443$request_uri;
@@ -18,9 +23,6 @@ server {
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name {{nextcloud_server_names|join(' ')}}; server_name {{nextcloud_server_names|join(' ')}};


# Use Mozilla's guidelines for SSL/TLS settings
# https://mozilla.github.io/server-side-tls/ssl-config-generator/
# NOTE: some settings below might be redundant
ssl_certificate /etc/ssl/certs/{{nextcloud_server_names|first}}.fullchain.pem; ssl_certificate /etc/ssl/certs/{{nextcloud_server_names|first}}.fullchain.pem;
ssl_certificate_key /etc/ssl/private/{{nextcloud_server_names|first}}.key.pem; ssl_certificate_key /etc/ssl/private/{{nextcloud_server_names|first}}.key.pem;




Loading…
Cancel
Save