nginxconfig.io/public/templates/example.com.conf.html

<span ng-if="data.https"># certbot certonly --non-interactive --text --email {{ data.email }} --agree-tos --force-renew --webroot --webroot-path /var/www/_letsencrypt --domain {{ data.domain }} --domain www.{{ data.domain }}{{ data.cdn ? ' --domain cdn.' + data.domain : '' }}
server {
	listen 443 ssl{{ data.http2 ? ' http2' : '' }};
	listen [::]:443 ssl{{ data.http2 ? ' http2' : '' }};

	server_name {{ !data.non_www ? 'www.' : '' }}{{ data.domain }};<span ng-if="data.php !== 'off'">
	set $base /var/www/{{ data.domain }};
	root $base{{ data.document_root }};</span><span ng-if="data.php === 'off'">
	root /var/www/{{ data.domain }}{{ data.document_root }};</span>

	ssl_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ data.domain }}/privkey.pem;
	ssl_trusted_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;<span ng-if="(data.php !== 'off' && data.index_php) || data.index_html">

	location / {
		try_files $uri $uri/ {{ data.index_html ? '/index.html' : '' }}{{ data.index_html && data.php !== 'off' && data.index_php ? ' ' : '' }}{{ data.php !== 'off' && data.index_php ? '/index.php?$query_string' : '' }};
	}</span>
<span ng-if="data.file_structure === 'separated'">
	include _general.conf;<span ng-if="data.php !== 'off' && data.wordpress">
	include _wordpress.conf;</span><span ng-if="data.php !== 'off'">
	include _php.conf;</span>
	include _letsencrypt.conf;
	include _ssl.conf;</span><span ng-if="data.file_structure === 'unified'">
<ng-include ng-include-tabs="2" src="'templates/_general.conf.html'" onload="refreshHighlighting()"></ng-include><span ng-if="data.php !== 'off' && data.wordpress">

<ng-include ng-include-tabs="2" src="'templates/_wordpress.conf.html'" onload="refreshHighlighting()"></ng-include></span><span ng-if="data.php !== 'off'">

<ng-include ng-include-tabs="2" src="'templates/_php.conf.html'" onload="refreshHighlighting()"></ng-include></span>

<ng-include ng-include-tabs="2" src="'templates/_letsencrypt.conf.html'" onload="refreshHighlighting()"></ng-include></span><span ng-if="data.file_structure === 'unified'">

	include _ssl.conf;</span>
}<span ng-if="data.cdn">

# CDN
server {
	listen 443 ssl{{ data.http2 ? ' http2' : '' }};
	listen [::]:443 ssl{{ data.http2 ? ' http2' : '' }};

	server_name cdn.{{ data.domain }};
	root /var/www/{{ data.domain }}{{ data.document_root }};<span ng-if="data.access_log !== ''">

	access_log off;</span>

	ssl_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ data.domain }}/privkey.pem;
	ssl_trusted_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;<span ng-if="data.gzip">

	# gzip
	gzip on;
	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
	gzip_types {{ gzipTypes }};</span>

	include _ssl.conf;

	location ~* \.(?:{{ extensions.assets }}|{{ extensions.fonts }}|{{ extensions.svg }}|{{ extensions.images }}|{{ extensions.audio }}|{{ extensions.video }}|{{ extensions.docs }})$ {
		add_header Access-Control-Allow-Origin "*";
		add_header Cache-Control "public";
		expires 30d;
	}

	location / {
		deny all;
	}
}</span>

# HTTPS {{ !data.non_www ? 'domain, ' : '' }}subdomains redirect
server {
	listen 443 ssl{{ data.http2 ? ' http2' : '' }};
	listen [::]:443 ssl{{ data.http2 ? ' http2' : '' }};

	server_name {{ !data.non_www ? data.domain + ' ' : '' }}*.{{ data.domain }};

	ssl_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ data.domain }}/privkey.pem;
	ssl_trusted_certificate /etc/letsencrypt/live/{{ data.domain }}/fullchain.pem;

	include _ssl.conf;

	return 301 https://{{ !data.non_www ? 'www.' : '' }}{{ data.domain }}$request_uri;
}

# HTTP redirect
server {
	listen 80;
	listen [::]:80;

	server_name {{ data.domain }} *.{{ data.domain }};
<span ng-if="data.file_structure === 'separated'">
	include _letsencrypt.conf;</span><span ng-if="data.file_structure === 'unified'">
<ng-include ng-include-tabs="2" src="'templates/_letsencrypt.conf.html'" onload="refreshHighlighting()"></ng-include></span>

	return 301 https://{{ !data.non_www ? 'www.' : '' }}{{ data.domain }}$request_uri;
}</span><span ng-if="!data.https">server {
	listen 80;
	listen [::]:80;

	server_name {{ !data.non_www ? 'www.' : '' }}{{ data.domain }};<span ng-if="data.php !== 'off'">
	set $base /var/www/{{ data.domain }};
	root $base{{ data.document_root }};</span><span ng-if="data.php === 'off'">
	root /var/www/{{ data.domain }}{{ data.document_root }};</span><span ng-if="(data.php !== 'off' && data.index_php) || data.index_html">

	location / {
		try_files $uri $uri/ {{ data.index_html ? '/index.html' : '' }}{{ data.index_html && data.php !== 'off' && data.index_php ? ' ' : '' }}{{ data.php !== 'off' && data.index_php ? '/index.php?$query_string' : '' }};
	}</span>
<span ng-if="data.file_structure === 'separated'">
	include _general.conf;<span ng-if="data.php !== 'off' && data.wordpress">
	include _wordpress.conf;</span><span ng-if="data.php !== 'off'">
	include _php.conf;</span></span><span ng-if="data.file_structure === 'unified'">
<ng-include ng-include-tabs="2" src="'templates/_general.conf.html'" onload="refreshHighlighting()"></ng-include><span ng-if="data.php !== 'off' && data.wordpress">

<ng-include ng-include-tabs="2" src="'templates/_wordpress.conf.html'" onload="refreshHighlighting()"></ng-include></span><span ng-if="data.php !== 'off'">

<ng-include ng-include-tabs="2" src="'templates/_php.conf.html'" onload="refreshHighlighting()"></ng-include></span></span>
}<span ng-if="data.cdn">

# CDN
server {
	listen 80;
	listen [::]:80;

	server_name cdn.{{ data.domain }};
	root /var/www/{{ data.domain }}{{ data.document_root }};<span ng-if="data.access_log !== ''">

	access_log off;</span><span ng-if="data.gzip">

	# gzip
	gzip on;
	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
	gzip_types {{ gzipTypes }};</span>

	location ~* \.(?:{{ extensions.assets }}|{{ extensions.fonts }}|{{ extensions.svg }}|{{ extensions.images }}|{{ extensions.audio }}|{{ extensions.video }}|{{ extensions.docs }})$ {
		add_header Access-Control-Allow-Origin "*";
		add_header Cache-Control "public";
		expires 30d;
	}

	location / {
		deny all;
	}
}</span>

# {{ !data.non_www ? 'domain, ' : '' }}subdomains redirect
server {
	listen 80;
	listen [::]:80;

	server_name {{ !data.non_www ? data.domain + ' ' : '' }}*.{{ data.domain }};

	return 301 http://{{ !data.non_www ? 'www.' : '' }}{{ data.domain }}$request_uri;
}</span>