From 2f5a2e0fbad15ff52f997f66963b2ad695a4218a Mon Sep 17 00:00:00 2001
From: Bernhard M. Wiedemann <bwiedemann@suse.de>
Date: Nov 06 2021 08:27:01 +0000
Subject: pagure: Redirect http to https


---

diff --git a/pillar/role/pagure.sls b/pillar/role/pagure.sls
index b0bf64d..1f4fcb1 100644
--- a/pillar/role/pagure.sls
+++ b/pillar/role/pagure.sls
@@ -31,16 +31,20 @@ nginx:
   ng:
     servers:
       managed:
-        code.opensuse.org.conf:
+        redirhttp.conf:
           config:
             - server:
-                - server_name: code.opensuse.org
+                - server_name: '_'
                 - listen:
                     - 80
                     - default_server
-                - listen:
-                    - '[::]:80'
-                    - default_server
+                - location /:
+                    - return: '301 https://$host$request_uri'
+          enabled: True
+        code.opensuse.org.conf:
+          config:
+            - server:
+                - server_name: code.opensuse.org
                 - listen:
                     - 443
                     - ssl
@@ -67,11 +71,6 @@ nginx:
             - server:
                 - server_name: releases.opensuse.org
                 - listen:
-                    - 80
-                - listen:
-                    - '[::]:80'
-                    - default_server
-                - listen:
                     - 443
                     - ssl
                 - listen:
@@ -88,11 +87,6 @@ nginx:
             - server:
                 - server_name: ev.opensuse.org
                 - listen:
-                    - 80
-                - listen:
-                    - '[::]:80'
-                    - default_server
-                - listen:
                     - 443
                     - ssl
                 - listen:
@@ -114,11 +108,6 @@ nginx:
             - server:
                 - server_name: pages.opensuse.org
                 - listen:
-                    - 80
-                - listen:
-                    - '[::]:80'
-                    - default_server
-                - listen:
                     - 443
                     - ssl
                 - listen: