server {
    listen 80;
    listen [::]:80;

    server_name {{ cgit_hostname }};

    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name {{ cgit_hostname }};

    ssl_certificate {{ nginx_ssl_certificate }};
    ssl_certificate_key {{ nginx_ssl_certificate_key }};

    location / {
        proxy_pass http://{{ network_ipv4_address }}:{{ cgit_port }};
    }
}