include:
  - role.common.nginx

nginx:
  ng:
    servers:
      managed:
        progress.opensuse.org.conf:
          config:
            - server:
                - listen: 80
                - server_name: progress.opensuse.org
                - server_tokens: 'off'
                - client_max_body_size: 20m
                # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
                - add_header: Strict-Transport-Security max-age=15768000
                - access_log: /var/log/nginx/redmine.access.log combined
                - error_log: /var/log/nginx/redmine.error.log
                - location /:
                    - try_files: $uri/index.html $uri.html $uri @cluster
                - location @cluster:
                    - proxy_pass: http://127.0.0.1:3000
                    - proxy_set_header: Host $host
                    - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
                - error_page: 500 502 503 504 /50x.html
                - location = /50x.html:
                    - root: /srv/www/htdocs
          enabled: True