anchor.diff:  }
   <% if fetch(:nginx_use_ssl) %>
   server {
  -  listen <%= "#{@ip}:80" %>;
  +  listen <%= "#{fetch(:nginx_local_ip, "127.0.0.1")}:80" %>;
     rewrite ^(.*) https://$host$1 permanent;
   }
   <% end %>
   
   server {
   <% if fetch(:nginx_use_ssl) %>
  -  listen <%= "#{@ip}:443" %>;
  +  listen <%= "#{ fetch(:nginx_local_ip, "127.0.0.1")}:443" %>;
     ssl on;
     ssl_certificate /etc/ssl/certs/<%= fetch(:nginx_config_name) %>.crt;
     ssl_certificate_key /etc/ssl/private/<%= fetch(:nginx_config_name) %>.key;
   <% else %>
  -  listen <%= "#{@ip}:80" %>;
  +  listen <%= "#{ fetch(:nginx_local_ip, "127.0.0.1")}:80" %>;
   <% end %>
   
     client_max_body_size 4G;
  
positive.code: <% if fetch(:nginx_local_ip) %>
    <% @ip = fetch(:nginx_local_ip) %>
  <% else %>
    <% @ip = "127.0.0.1" %>
  <% end %>
  
  upstream puma_<%= fetch(:nginx_config_name) %> { <%
    flags = 'fail_timeout=0'
    @backends = [fetch(:puma_bind)].flatten.map do |m|
  
negative.code:     access_log <%= shared_path %>/log/nginx.access.log;
      error_log <%= shared_path %>/log/nginx.error.log;
  
  <% if fetch(:nginx_use_basicauth) %>
      # Basic authentication
      auth_basic "Restricted";
      auth_basic_user_file <%= "#{fetch(:nginx_basicauth_location, "/var/www/_htpasswd/#{fetch(:nginx_config_name)}.htpasswd")}" %>;
  <% end %>
    }
  
  