server { <% if ( localAddress ) { -%> listen "<%- localAddress %>"<%- server.isDefaultServer ? " default_server reuseport" : "" %><%- server.ssl ? " ssl" : "" %><%- server.proxyProtocol ? " proxy_protocol" : "" %>; <% } else { -%> <% if ( nginx.listenIpV4 ) { -%> listen *:<%- server.port %><%- server.isDefaultServer ? " default_server reuseport" : "" %><%- server.ssl ? " ssl" : "" %><%- server.isUdp ? " udp" : "" %><%- server.proxyProtocol ? " proxy_protocol" : "" %>; <% } -%> <% if ( nginx.listenIpV6 ) { -%> listen [::]:<%- server.port %><%- server.isDefaultServer ? " default_server reuseport" : "" %><%- server.ssl ? " ssl" : "" %><%- server.isUdp ? " udp" : "" %><%- server.proxyProtocol ? " proxy_protocol" : "" %>; <% } -%> <% } -%> <% if ( server.ssl ) { -%> <% if ( !server.isDefaultServer ) { -%> server_name <%- serverName.name %>; <% } -%> ssl_certificate "<%- serverName.certificatePath %>"; ssl_certificate_key "<%- serverName.privateKeyPath %>"; ssl_stapling <%- serverName.isSelfSignedCertificate ? "off" : "on" %>; ssl_stapling_verify <%- serverName.isSelfSignedCertificate ? "off" : "on" %>; <% } -%> proxy_pass "<%- server.proxy.id %>"; proxy_protocol <%- server.proxy.upstreamProxyProtocol ? "on" : "off" %>; }