{{ ansible_managed | comment }}
{#

:%s/example.com/test.winkekatze.tv/gc

#}
server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;

  server_name example.com;

  include snippets/tls_parameters_{{ site.name }}.snippet.conf;
  include snippets/tls_certificate_{{ site.name }}.snippet.conf;
  include snippets/logging_{{ site.name }}.snippet.conf;

  root /srv/www/example.com;

  location / {
    charset utf-8;
    try_files $uri $uri/ =404;
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, max-age=0";
    add_header  X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
  }
  location ~* .(?:css|js)$ {
    charset utf-8;
    try_files $uri $uri/ =404;
    add_header Access-Control-Allow-Origin *;
    expires 2h;
    add_header Cache-Control "public";
    add_header  X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
  }
  location stream.m3u8 {
    types { } default_type "application/x-mpegURL; charset=utf-8";
    charset utf-8;
    try_files $uri $uri/ =404;
    add_header Cache-Control "public, max-age=0";
    add_header Access-Control-Allow-Origin *;
    add_header  X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
  }

}