server { listen 80 default_server; listen [::]:80 default_server; server_name _; charset utf-8; server_tokens off; include /etc/nginx/snippets/letsencrypt-acme-challenge.conf; root /var/www/html; location / { index index.html; autoindex on; autoindex_exact_size off; } } server { listen 443 ssl default_server; listen [::]:443 ssl default_server; server_name _; charset utf-8; server_tokens off; {% if acme_server == 'zuckerwatte' %} ssl_certificate /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/privkey.pem; {% else %} ssl_certificate /etc/nginx/ssl/{{ http_domain_external }}/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/{{ http_domain_external }}/privkey.pem; {% endif %} include /etc/nginx/snippets/letsencrypt-acme-challenge.conf; root /var/www/html; location / { index index.html; autoindex on; autoindex_exact_size off; } }