--- era_files_domain: 'mainnet.era.nimbus.team' era_files_path: '/data/era' # CloudFlare Origin certificates origin_certs: - domain: 'nimbus.team' crt: '{{lookup("vault", "certs/cloudflare/nimbus.team", field="origin.crt", stage="all", env="all")}}' key: '{{lookup("vault", "certs/cloudflare/nimbus.team", field="origin.key", stage="all", env="all")}}' nginx_sites: era_files: - listen 80 default_server - listen 443 ssl - server_name {{ era_files_domain }} - ssl_certificate /certs/nimbus.team/origin.crt - ssl_certificate_key /certs/nimbus.team/origin.key - location / { root {{ era_files_path }}; autoindex on; autoindex_format html; }