infrastructure/roles/repo_archive_split_temp/templates/nginx.d.conf.j2

server {
    listen       80;
    listen       [::]:80;
    listen       443 ssl;
    listen       [::]:443 ssl;
    http2        on;
    server_name  {{ repos_rsync_domain }};
    root         /srv/ftp;

    include snippets/letsencrypt.conf;

    ssl_certificate      /etc/letsencrypt/live/{{ repos_rsync_domain }}/fullchain.pem;
    ssl_certificate_key  /etc/letsencrypt/live/{{ repos_rsync_domain }}/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/{{ repos_rsync_domain }}/chain.pem;

    access_log   /var/log/nginx/{{ repos_rsync_domain }}/access.log reduced;
    access_log   /var/log/nginx/{{ repos_rsync_domain }}/access.log.json json_reduced;

    location = /lastupdate {
        allow all;
    }

    location / {
        deny all;
    }
}