{{ ansible_managed | comment }}

{% if nginx_server_name is defined %}
server {
    listen {{ nginx_port }};

    server_name {{ nginx_server_name }};
{% endif %}

{% for location in nginx_locations %}
    location {{ location }} {
{% if location.proxy_pass is defined %}
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_redirect off;
{% endif %}

{% if location.basic_auth_file is defined %}
        auth_basic "Authentication required";
        auth_basic_user_file /etc/nginx/{{ location.basic_auth_file }};
{% endif %}

{% if location.proxy_pass is defined %}
        proxy_pass http://localhost:{{ location.proxy_pass.port | default('80') }}{{ location.proxy_pass.path }};
{% endif %}
    }
{% endif %}
{% if nginx_server_name is defined %}
}
{% endif %}