anchor.diff:    ssl_certificate_key <%= @ssl_certificate_key %>;
     <% if @ssl_client_certificate %>
     ssl_client_certificate <%= @ssl_client_certificate%>;
  - 	<% end %>
  +  <% end %>
   
     # GitLab needs backwards compatible ciphers to retain compatibility with Java IDEs
     ssl_ciphers '<%= @ssl_ciphers %>';
  
positive.code: <% @listen_addresses.each do |listen_address| %>
    listen <%= listen_address %>:<%= @listen_port %><% if @https %> ssl spdy<% end %>;
  <% end %>
  	server_name  ~^(?<group>.*)\.<%= @fqdn_regex %>$;
    server_tokens off; ## Don't show the nginx version number, a security best practice
    root <%= @pages_path %>/${group};
  
  	## Disable symlink traversal
  	disable_symlinks on;
  
    <% if @https %>
    ## Strong SSL Security
  
negative.code: <% end %>
    server_name  ~^(?<group>.*)\.<%= @fqdn_regex %>$;
    server_tokens off; ## Don't show the nginx version number, a security best practice
    return 301 https://$http_host:<%= @port %>$request_uri;
    access_log  <%= @log_directory %>/gitlab_pages_access.log gitlab_access;
    error_log   <%= @log_directory %>/gitlab_pages_error.log;
  }
  