anchor.diff:    <%- if @pun_uri && @nginx_uri -%>
     # Reverse proxy traffic to backend PUNs through Unix domain sockets:
     #
  -  #     <%= _scheme %>://<%= _host %>:<%= _port %><%= @pun_uri %>/dev/app/simulations/1
  +  #     <%= @ssl ? "https" : "http" %>://<%= _host %>:<%= _port %><%= @pun_uri %>/dev/app/simulations/1
     #     #=> unix:/path/to/socket|http://localhost<%= @pun_uri %>/dev/app/simulations/1
     #
     SetEnv OOD_PUN_URI "<%= @pun_uri %>"
  
positive.code:   <%- if @oidc_uri -%>
    # OpenID Connect redirect URI:
    #
    #     <%= _scheme %>://<%= _host %>:<%= _port %><%= @oidc_uri %>
    #     #=> handled by mod_auth_openidc
    #
    <Location "<%= @oidc_uri %>">
  
negative.code: 
    RewriteEngine On
    RewriteCond %{HTTP_HOST} !^(<%= @servername %>(:<%= _port %>)?)?$ [NC]
    RewriteRule ^(.*) <%= @ssl ? "https" : "http" %>://<%= @servername %>:<%= _port %>$1 [R=301,L]
    <%- end -%>
  
    <%- if @ssl -%>
  