infra/roles/stable/nginx/templates/default.j2

# cache
proxy_cache_path /tmp levels=1:2 keys_zone=STATIC:10m	inactive=24h  max_size=10g use_temp_path=off;

{% if with_certbot -%}
# redirect all http traffic to https
server {
	listen 80 default_server;
	listen [::]:80 default_server;
	server_name _;
	return 301 https://$host$request_uri;
}
{%- endif %}

server {
  listen 80;
  listen [::]:80;
  server_name _server_name;
  root /var/www/html;
}

# enable proxy websocket
map $http_upgrade $connection_upgrade {
	default upgrade;
	''      close;
}