server_ssl_settings.erb

<% if scope.call_function('versioncmp', [scope['nginx::nginx_version'], '1.15.0']) < 0 -%>
  ssl on;
<% end -%>
<% if scope.call_function('versioncmp', [scope['nginx::nginx_version'], '1.25.1']) >= 0 && @http2 -%>
  http2 <%= @http2 %>;
<% end -%>
<% if @ssl_cert_real -%>
<% @ssl_cert_real.each do | cert | -%>
  ssl_certificate           <%= cert %>;
<% end -%>
<% end -%>
<% if @ssl_key_real -%>
<% @ssl_key_real.each do | key | -%>
  ssl_certificate_key       <%= key %>;
<% end -%>
<% end -%>
<% if defined? @ssl_client_cert -%>
  ssl_client_certificate    <%= @ssl_client_cert %>;
  ssl_verify_client         <%= @ssl_verify_client %>;
<% end -%>
<% if defined? @ssl_dhparam -%>
  ssl_dhparam               <%= @ssl_dhparam %>;
<% end -%>
<%- if defined? @ssl_ecdh_curve -%>
  ssl_ecdh_curve            <%= @ssl_ecdh_curve %>;
<%- end -%>
<% if @ssl_cache -%>
  ssl_session_cache         <%= @ssl_cache %>;
<% end -%>
<% if @ssl_session_timeout -%>
  ssl_session_timeout       <%= @ssl_session_timeout %>;
<% end -%>
<% if @ssl_session_tickets -%>
  ssl_session_tickets       <%= @ssl_session_tickets %>;
<% end -%>
<% if @ssl_session_ticket_key -%>
  ssl_session_ticket_key    <%= @ssl_session_ticket_key %>;
<% end -%>
<% if @ssl_buffer_size -%>
  ssl_buffer_size           <%= @ssl_buffer_size %>;
<% end -%>
<% if @ssl_protocols -%>
  ssl_protocols             <%= @ssl_protocols %>;
<% end -%>
<% if @ssl_ciphers -%>
  ssl_ciphers               <%= @ssl_ciphers %>;
<% end -%>
<% if @ssl_prefer_server_ciphers -%>
  ssl_prefer_server_ciphers <%= @ssl_prefer_server_ciphers %>;
<% end -%>
<% if @ssl_crl -%>
  ssl_crl                   <%= @ssl_crl %>;
<% end -%>
<%- if instance_variables.any? { |iv| iv.to_s.include? 'ssl_' } -%>
  <%- if @ssl_stapling -%>
  ssl_stapling              on;
  <%- end -%>
  <%- if defined? @ssl_stapling_file -%>
  ssl_stapling_file         <%= @ssl_stapling_file %>;
  <%- end -%>
  <%- if defined? @ssl_stapling_responder -%>
  ssl_stapling_responder    <%= @ssl_stapling_responder %>;
  <%- end -%>
  <%- if @ssl_stapling_verify -%>
  ssl_stapling_verify       on;
  <%- end -%>
  <%- if defined? @ssl_trusted_cert -%>
  ssl_trusted_certificate   <%= @ssl_trusted_cert %>;
  <%- end -%>
  <%- if @ssl_verify_depth -%>
  ssl_verify_depth          <%= @ssl_verify_depth %>;
  <%- end -%>
  <%- if @ssl_password_file -%>
  ssl_password_file         <%= @ssl_password_file %>;
  <%- end -%>
<% end -%>