server { listen 80; listen <%= @server_port %> ssl; server_name <%= @server_name %> <%= @server_aliases.join(" ") %>; access_log /var/log/nginx/<%= @server_name %>.access.log; error_log /var/log/nginx/<%= @server_name %>.error.log; root <%= @docroot %>; index index.php; location / { try_files $uri $uri/ /index.php?$args; set $redirect_to_ssl "no"; if ($ssl_protocol = "") { set $redirect_to_ssl "yes"; } if ($redirect_to_ssl = yes) { rewrite ^(.*) https://$host$1 permanent; } } location ~ \.php$ { try_files $uri =404; include fastcgi_params; fastcgi_pass 127.0.0.1:9001; fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name; } ssl_certificate <%= @ssl_cert %>; ssl_certificate_key <%= @ssl_key %>; }