paulbsd-salt/states/nginx/templates/nginx.conf.j2

## {{ salt['pillar.get']('salt_managed', default='Salt Managed') }}

user www-data;

worker_processes 4;

error_log   /var/log/nginx/error.log;
error_log   syslog:server=localhost:514 info;

events {
  worker_connections 1024;
}

http {
  include           fastcgi_params;
  include           proxy_params;
  include           mime.types;
  include           ssl_params;
  charset           utf-8;

  include           sites-enabled/*;

  access_log        /var/log/nginx/$host.access.log;
  access_log        syslog:server=localhost:514   combined;

  default_type        application/octet-stream;
  sendfile            on;
  keepalive_timeout   60;
  server_tokens       off;

  proxy_intercept_errors    on;
  fastcgi_intercept_errors  on;
  fastcgi_read_timeout      300;

  server {
    listen 80   default_server;
    listen 443  default_server  ssl;

    listen [::]:80    default_server;
    listen [::]:443   default_server  ssl;

    root    /var/www/html;
    index   index.html;

    location /status {
        stub_status   on;
        access_log    off;
        allow         127.0.0.1;
        allow         ::1;
        deny          all;
    }
  }
}