🍽 Fork YunoHost — snapshot mangé par la machine à tsoins

Upstream: https://github.com/YunoHost/yunohost @ 3a5f8bac8301c450897b96cbd43a4c7d3ba750fb
But (José) : transformer tout le code en bions + ploxions du xerboxion.
La carte de digestion vit au labo : /yunohost-digest.json

conf/nginx/yunohost_admin.conf

@@ -0,0 +1,35 @@
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+
+    include /etc/nginx/conf.d/default.d/*.conf;
+}
+
+server {
+
+    {% if tls_passthrough_enabled != "True" %}
+    listen 443 ssl http2 default_server;
+    listen [::]:443 ssl http2 default_server;
+    {% else %}
+    listen 127.0.0.1:444 ssl http2 default_server;
+    # Prevent 301/302 rewrite/redirect from including the 444 port
+    port_in_redirect off;
+    {% endif %}
+
+    include /etc/nginx/conf.d/security.conf.inc;
+
+    ssl_certificate /etc/yunohost/certs/yunohost.org/crt.pem;
+    ssl_certificate_key /etc/yunohost/certs/yunohost.org/key.pem;
+
+    more_set_headers "Strict-Transport-Security : max-age=63072000; includeSubDomains; preload";
+    more_set_headers "Referrer-Policy : 'same-origin'";
+
+    location /yunohost {
+        # Redirect most of 404 to maindomain.tld/yunohost/sso
+        access_by_lua_file /usr/share/ssowat/access.lua;
+    }
+
+    include /etc/nginx/conf.d/yunohost_admin.conf.inc;
+    include /etc/nginx/conf.d/yunohost_api.conf.inc;
+    include /etc/nginx/conf.d/default.d/*.conf;
+}