Kapisi/roles/WebServer/files/conf.d/Yggdrasil/password.conf

server {
    listen      443 ssl http2;
    server_name password.aninix.net;

    include conf/sec.conf;
    include conf/default.csp.conf;
    include conf/letsencrypt.conf;

    location / {
        root /usr/share/webapps/self-service-password/htdocs/;

        # https://ltb-project.org/documentation/self-service-password/1config_nginx
        index index.php index.html index.htm;

        # Disable sendfile as per https://docs.vagrantup.com/v2/synced-folders/virtualbox.html
        sendfile off;

        gzip on;
        gzip_comp_level 6;
        gzip_min_length 1000;
        gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript text/x-js;
        gzip_vary on;
        gzip_proxied any;
        gzip_disable "MSIE [1-6]\.(?!.*SV1)";

        # Add stdout logging

        #error_log /dev/stdout warn;
        #access_log /dev/stdout info;

        include conf.d/fastcgi.config;
    }

    # deny access to . files, for security
    #
    location ~ /\.\. {
        log_not_found off;
        deny all;
    }

    location ~ /scripts {
        log_not_found off;
        deny all;
    }

}