{% set host = salt['grains.get']('host') %}
{% set ip4_private = salt['grains.get']('ipv4_interfaces:private[0]') %}

include:
  - role.common.nginx

nginx:
  ng:
    server:
      config:
        http:
          client_max_body_size: 8m
          gzip_static: 'on'
          gzip_min_length: 1000
          gzip_proxied:
            - expired
            - no-cache
            - no-store
            - private
            - auth
          gzip_types:
            - text/plain
            - text/css
            - application/xml
            - application/x-javascript
        worker_processes: 4
    servers:
      managed:
        keyserver.opensuse.org.conf:
          config:
            - server:
                - listen:
                    - 80
                    - default_server
                - listen:
                    - {{ ip4_private }}:11371
                    - default_server
                - server_name: keyserver.opensuse.org
                - server_name: {{ host }}.opensuse.org
                - server_name: '*.sks-keyservers.net'
                - server_name: '*.pool.sks-keyservers.net'
                - server_name: pgp.mit.edu
                - server_name: keys.gnupg.net
                - root: /srv/www/htdocs
                - rewrite: ^/stats /pks/lookup?op=stats
                - rewrite: ^/s/(.*) /pks/lookup?search=$1
                - rewrite: ^/search/(.*) /pks/lookup?search=$1
                - rewrite: ^/g/(.*) /pks/lookup?op=get&search=$1
                - rewrite: ^/get/(.*) /pks/lookup?op=get&search=$1
                - rewrite: ^/hashquery /pks/hashquery
                - rewrite: ^/hashquery/(.*) /pks/hashquery/$1
                - rewrite: ^/d/(.*) /pks/lookup?op=get&options=mr&search=$1
                - rewrite: ^/download/(.*) /pks/lookup?op=get&options=mr&search=$1
                - expires: 1y
                - add_header: Pragma public
                - add_header: Cache-Control "public"
                - location /check.txt:
                    - root: /srv/www/htdocs
                    - access_log: 'off'
                - location /:
                    - root: /srv/www/htdocs
                    - index:
                        - index.html
                        - index.htm
                - location /pks:
                    - proxy_pass: http://127.0.0.1:11371
                    - proxy_pass_header: Server
                    - add_header: Via "1.1 {{ host }}.opensuse.org:11371"
                    - proxy_ignore_client_abort: 'on'
                    - client_max_body_size: 8m
                - error_page: 500 502 503 504 /50x.html
                - location = /50x.html:
                    - root: /srv/www/htdocs
          enabled: True