{{ ansible_managed | comment }}

include /etc/nginx/includes/http-common.conf;

server {
  listen 80;
  listen [::]:80;
  server_tokens off;

  server_name {{onlyoffice_server_name}};

  location /.well-known/acme-challenge {
    default_type "text/plain";
    root /var/www/default;
  }

  # enforce https
  #return 301 https://$server_name:443$request_uri;
}

server {
  listen 443;
  listen [::]:443;
  server_tokens off;

  server_name {{onlyoffice_server_name}};

  ssl_certificate /etc/ssl/certs/{{onlyoffice_server_name}}.fullchain.pem;
  ssl_certificate_key /etc/ssl/private/{{onlyoffice_server_name}}.key.pem;

  include /etc/nginx/includes/ds-*.conf;
}