Add a new TLS flavor named 'mail'

2017-11-07 16:16:41 +01:00
parent 5fd29a6593
commit bfa50c5aa7
3 changed files with 7 additions and 1 deletions
--- a/core/nginx/conf/nginx.conf
+++ b/core/nginx/conf/nginx.conf
@@ -34,10 +34,12 @@ http {
      ssl_session_cache shared:SSLHTTP:50m;
      add_header Strict-Transport-Security max-age=15768000;

+      {% if not TLS_FLAVOR == "mail" %}
      if ($scheme = http) {
        return 301 https://$host$request_uri;
      }
      {% endif %}
+      {% endif %}

      # In any case, enable the proxy for certbot if the flavor is letsencrypt
      {% if TLS_FLAVOR == 'letsencrypt' %}