paulbsd-salt/states/nginx/templates/nginx.conf.j2

## {{ salt['pillar.get']('salt_managed', default='Salt Managed') }}

user www-data;

worker_processes 4;

error_log   /var/log/nginx/error.log;
error_log   syslog:server=localhost:514 info;

events {
  worker_connections 1024;
}

http {
  include                   fastcgi_params;
  include                   proxy_params;
  include                   mime.types;
  include                   ssl_params;
  charset                   utf-8;

  include                   sites-enabled/*;

  log_format main           '$remote_addr - $remote_user [$time_iso8601] '
                            '"$request" $status $body_bytes_sent '
                            '"$http_referer" "$http_user_agent"';

  access_log                /var/log/nginx/$host.access.log main;
  access_log                syslog:server=localhost:514 main;

  default_type              application/octet-stream;
  sendfile                  on;
  keepalive_timeout         60;
  server_tokens             off;

  proxy_intercept_errors    on;
  fastcgi_intercept_errors  on;
  fastcgi_read_timeout      300;

  server {
    listen 80   default_server;
    listen 443  default_server  ssl;

    listen [::]:80    default_server;
    listen [::]:443   default_server  ssl;

    root    /var/www/html;
    index   index.html;

    location /status {
        stub_status   on;
        access_log    off;
        allow         127.0.0.1;
        allow         ::1;
        deny          all;
    }
  }
}