ansible-role-mailserver/templates/postfixadmin-domain.nginx

server {
	listen [::]:443 ssl http2;
	listen 443 ssl http2;

	server_name {{ mailserver_postfixadmin_domain }};

	ssl_certificate /etc/dehydrated/certs/{{ mailserver_postfixadmin_domain }}/fullchain.pem;
	ssl_certificate_key /etc/dehydrated/certs/{{ mailserver_postfixadmin_domain }}/privkey.pem;

	include snippets/letsencrypt.conf;

	root /usr/share/webapps/postfixadmin/public;
	index index.html index.htm index.php;

	location ~ \.php(?:$|/) {
		fastcgi_split_path_info ^(.+.php)(/.+)$;
		fastcgi_pass unix:/run/postfixadmin/postfixadmin.sock;
		fastcgi_index index.php;
	
		include fastcgi.conf;

		fastcgi_param PHP_ADMIN_VALUE open_basedir=/etc/webapps/postfixadmin/:/usr/share/webapps/postfixadmin:/var/cache/postfixadmin/:/tmp:/usr/share/pear:/dev/urandom;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_param HTTPS on;
	}
}