infra/roles/nginx/defaults/main.yml

---

certbot_authenticator: gandi

nginx_conf: |
  server
  {
      listen [::]:80; listen 80;
      server_name {{ nginx_domain }};
      access_log /var/log/nginx/{{ nginx_domain }}-access.log;
      error_log /var/log/nginx/{{ nginx_domain }}-error.log;

      return 301 https://$host$request_uri;
  }

  server
  {
      listen [::]:443 ssl; listen 443 ssl;
      charset utf-8;
      server_name {{ nginx_domain }};
      access_log /var/log/nginx/{{ nginx_domain }}-access.log;
      error_log /var/log/nginx/{{ nginx_domain }}-error.log;
      include snippets/letsencrypt-{{ nginx_domain }}.conf;

      root {{ nginx_path }};
      index index.html;
  }