include:

  - role.common.nginx

nginx:

  ng:

    servers:

      managed:

        progress.opensuse.org.conf:

          config:

            - upstream redmine:

                - server:

                    - unix:/srv/www/vhosts/redmine/tmp/sockets/redmine.socket

                    - fail_timeout=0

            - server:

                - listen: 80

                - server_tokens: 'off'

                # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)

                - add_header: Strict-Transport-Security max-age=15768000

                - location /:

                    - try_files: $uri/index.html $uri.html $uri @cluster

                - location @cluster:

                    - proxy_pass: http://redmine

                - access_log: /var/log/nginx/redmine.access.log combined

                - error_log: /var/log/nginx/redmine.error.log

          enabled: True