module-nginx/templates/vhost/vhost_header.erb

server {
  listen                <%= listen_ip %>:<%= listen_port %> <% if @listen_options %><%= listen_options %><% end %>;
  <% # check to see if ipv6 support exists in the kernel before applying %>
  <% if ipv6_enable == 'true' && (defined? ipaddress6) %>
  listen [<%= ipv6_listen_ip %>]:<%= ipv6_listen_port %> <% if @ipv6_listen_options %><%= ipv6_listen_options %><% end %> ipv6only=on;
  <% end %>
  server_name           <%= rewrite_www_to_non_www ? name.gsub(/^www\./, '') : server_name.join(" ") %>;
  access_log            <%= scope.lookupvar('nginx::params::nx_logdir')%>/<%= name %>.access.log;
  <% if defined? auth_basic -%>
auth_basic           "<%= auth_basic %>";
  <% end -%>
  <% if defined? auth_basic_user_file -%>
auth_basic_user_file <%= auth_basic_user_file %>;
  <% end -%>

  <% proxy_set_header.each do |header| %>
  proxy_set_header        <%= header %>;<% end %>
  <% if @rewrite_to_https %>
  if ($ssl_protocol = "") {
       return 301 https://$host$request_uri ;
  }
   <% end %>