tlsproxy.conf

server {
    listen {% if server.no_ssl is undefined or not server.no_ssl %}443 ssl{% else %}80{% endif %};
    server_name {{server.server_names|default([server.server_name])|join(" ")}};

    {% if server.include_acme|default(true) %}
    include /etc/nginx/snippets/acmetool.conf;

    {% endif -%}
    {% if server.root is defined %}
    root {{server.root}};
    {% endif %}
    {% if server.no_ssl is undefined or not server.no_ssl %}

    {% include "ssl-certificate" %}
    {% endif %}
    {% if server.cipher_strength is defined -%}
    ssl_ciphers '{{ciphers[server.cipher_strength]}}';
    {% endif %}
    {% if server.use_sso is defined and server.use_sso %}

    set $sso_group "{{server.sso_group}}";
    {% endif %}

    {% if server.params is defined %}
    {% for param in server.params %}
            {{param.key}} {{param.value}};
    {% endfor %}
    {% endif %}

    {% for location in server.public_locations %}
        {% set server = server %}
        {% include "locations/%s.conf"|format(location.type) %}
        {% if not loop.last %}


        {% endif %}
    {% endfor %}
    {% if server.use_sso is defined and server.use_sso %}

    include /etc/nginx/snippets/sso-locations.conf;
    {% else %}

    {% endif %}
}