mainunit: nginx.service
mainunitfile: nginx.service.j2
templatefiles:
  - src: nginx.conf.j2
    dest: ~/nginx.conf
backuptype: none
configdefinition:
  "$id": "nginx config"
  "$schema": "http://json-schema.org/draft-07/schema#"
  description: Extra nginx configuration
  type: object
  additionalProperties: false
  properties:
    certificatefile:
      type: string
      default: "~/ssl.cert"
      description: The file used for the certificate.  ATM this nginx only supports one certificate (use wildcards)
    keyfile:
      type: string
      default: "~/ssl.key"
      description: The key file used for the certificate.  ATM this nginx only supports one certificate (use wildcards)
    httpport:
      type: integer
      default: 80
      minimum: 1
      maximum: 65536
    httpsport:
      type: integer
      default: 443
      minimum: 1
      maximum: 65536
    listenhttpaddress4:
      type: string
      format: ipv4
      default: 0.0.0.0
    listenhttpsaddress4:
      type: string
      format: ipv4
      default: 0.0.0.0
    listenhttpaddress6:
      type: string
      format: ipv6
      default: "::"
    listenhttpsaddress6:
      type: string
      format: ipv6
      default: "::"
ports:
    - http
    - https
exports:
  firewall:
    redirect:
      - from: "{{ config.httpport }}"
        to: "{{ ports.http }}"
        version: ipv4
        ip: "{{ config.listenhttpaddress4 }}"
      - from: "{{ config.httpsport }}"
        to: "{{ ports.https }}"
        version: ipv4
        ip: "{{ config.listenhttpaddress4 }}"
      - from: "{{ config.httpport }}"
        to: "{{ ports.http }}"
        version: ipv6
        ip: "{{ config.listenhttpaddress6 }}"
      - from: "{{ config.httpsport }}"
        to: "{{ ports.https }}"
        version: ipv6
        ip: "{{ config.listenhttpaddress6 }}"