listen {{ CS_FRONTEND_HTTPS_PORT | last }} ssl;
http2 on;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_certificate     /etc/nginx/ssl/fullchain.crt;
ssl_certificate_key /etc/nginx/ssl/privkey.key;
#ssl_certificate     {{ CS_FRONTEND_CERT_PATH | last }}/{{ CS_NODE_FRONTEND_CERT_CRT_FILE | last }};
#ssl_certificate_key {{ CS_FRONTEND_CERT_PATH | last }}/{{ CS_NODE_FRONTEND_CERT_KEY_FILE | last }};
ssl_ciphers HIGH:!aNULL:!MD5;

{% if CS_FRONTEND_SCHEME_REDIRECT | last %}
if ($scheme = http)
{
  return 301 https://$host:{{ CS_FRONTEND_HTTPS_PORT | last }}$request_uri;
}
{% endif %}
