anchor.diff: -<% if fetch(:nginx_local_ip) %>
  -  <% @ip = fetch(:nginx_local_ip) %>
  -<% else %>
  -  <% @ip = "127.0.0.1" %>
  -<% end %>
  -
   upstream puma_<%= fetch(:nginx_config_name) %> { <%
     flags = 'fail_timeout=0'
     @backends = [fetch(:puma_bind)].flatten.map do |m|
  
positive.code: }
  <% if fetch(:nginx_use_ssl) %>
  server {
    listen <%= "#{@ip}:80" %>;
    rewrite ^(.*) https://$host$1 permanent;
  }
  <% end %>
  
  server {
  <% if fetch(:nginx_use_ssl) %>
    listen <%= "#{@ip}:443" %>;
    ssl on;
    ssl_certificate /etc/ssl/certs/<%= fetch(:nginx_config_name) %>.crt;
    ssl_certificate_key /etc/ssl/private/<%= fetch(:nginx_config_name) %>.key;
  <% else %>
    listen <%= "#{@ip}:80" %>;
  <% end %>
  
    client_max_body_size 4G;
  
negative.code:     access_log <%= shared_path %>/log/nginx.access.log;
      error_log <%= shared_path %>/log/nginx.error.log;
  
  <% if fetch(:nginx_use_basicauth) %>
      # Basic authentication
      auth_basic "Restricted";
      auth_basic_user_file <%= "#{fetch(:nginx_basicauth_location, "/var/www/_htpasswd/#{fetch(:nginx_config_name)}.htpasswd")}" %>;
  <% end %>
    }
  
  