upstream-zulip/puppet/zulip/templates/nginx/zulip-enterprise.template.erb

# For local IPC -- tusd to Django, or Django to Tornado
server {
<% if @nginx_http_only -%>
    listen 127.0.0.1:<%= @nginx_listen_port %>;
<% else -%>
    listen 127.0.0.1:80;
<% end -%>
    include /etc/nginx/zulip-include/app;
    include /etc/nginx/zulip-include/localhost.d/*.conf;
}


<% if @nginx_http_only -%>
<% else -%>
server {
    listen 80;
    listen [::]:80;
<% if @nginx_server_name != '' -%>
    server_name <%= @nginx_server_name %>;
<% end -%>

    location / {
        return 301 https://$host$request_uri;
    }

    include /etc/nginx/zulip-include/certbot;
}
<% end -%>

include /etc/nginx/zulip-include/trusted-ip;
include /etc/nginx/zulip-include/trusted-proto;
include /etc/nginx/zulip-include/s3-cache;
include /etc/nginx/zulip-include/upstreams;
include /etc/zulip/nginx_sharding_map.conf;


server {
<% if @nginx_http_only -%>
    listen <%= @nginx_listen_port %>;
    listen [::]:<%= @nginx_listen_port %>;
<% else -%>
    listen <%= @nginx_listen_port %> ssl http2;
    listen [::]:<%= @nginx_listen_port %> ssl http2;

    ssl_certificate <%= @ssl_dir %>/certs/zulip.combined-chain.crt;
    ssl_certificate_key <%= @ssl_dir %>/private/zulip.key;
<% end -%>
<% if @nginx_server_name != '' -%>
    server_name <%= @nginx_server_name %>;
<% end -%>

    include /etc/nginx/zulip-include/certbot;
    include /etc/nginx/zulip-include/app;
}