{{ ansible_header | comment }}

server {
    listen 80;
    listen [::]:80;
    server_name wiki.crans.org;

    access_log /var/log/nginx/wiki.log combined;
    error_log /var/log/nginx/wiki.error.log;

    # Redirect to home page
    rewrite ^/$ $scheme://wiki.crans.org/PageAccueil;

    # Limit uploads
    client_max_body_size 15M;

    # MoinMoin paths
    location /wiki/ { alias /var/local/wiki/htdocs/; }
    location /robots.txt { alias /var/local/wiki/robots.txt; }
    location /favicon.ico { alias /var/local/wiki/favicon.ico; }
    location /www-sitemap.xml { alias /var/local/wiki/www-sitemap.xml; }

    location / {
        uwsgi_pass unix:///var/run/uwsgi/app/moinmoin/socket;
        include uwsgi_params;
    }

    set_real_ip_from 10.231.136.0/24;
    set_real_ip_from 2a0c:700:0::/48;
    set_real_ip_from 185.230.76.0/22; #filaire publique
    set_real_ip_from 10.53.0.0/16; #nat des machines wifi crans
    set_real_ip_from 10.54.0.0/16; #nat des machines filaires crans
    real_ip_header X-Real-Ip;
}