Rake SSL settings for CTOR into single config

Author: Minoru

ctor/etc/nginx/sites-available/default

@@ -2,11 +2,7 @@ server {
     listen 443 ssl;
     server_name codingteam.org.ru;
     keepalive_timeout 60;
-    ssl_certificate /etc/letsencrypt/live/loglist.net/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/loglist.net/privkey.pem;
-    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_ciphers  "HIGH:!aNULL:!MD5:!kEDH";
-    add_header Strict-Transport-Security 'max-age=15552000';
+    include /etc/nginx/ssl.conf;
 
     location /_logs/ {
         proxy_set_header X-Forwarded-Host $host;

ctor/etc/nginx/sites-available/loglist

@@ -21,11 +21,7 @@ server {
         listen 443 ssl;
         server_name loglist.net;
 	keepalive_timeout 60;
-        ssl_certificate /etc/letsencrypt/live/loglist.net/fullchain.pem;
-        ssl_certificate_key /etc/letsencrypt/live/loglist.net/privkey.pem;
-        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-        ssl_ciphers  "HIGH:!aNULL:!MD5:!kEDH";
-        add_header Strict-Transport-Security 'max-age=15552000';
+        include /etc/nginx/ssl.conf;
 
         location / {
                  proxy_set_header X-Forwarded-Host $host;
@@ -41,11 +37,7 @@ server {
     listen 443 ssl;
     server_name *.loglist.net;
     keepalive_timeout 60;
-    ssl_certificate /etc/letsencrypt/live/loglist.net/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/loglist.net/privkey.pem;
-    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_ciphers  "HIGH:!aNULL:!MD5:!kEDH";
-    add_header Strict-Transport-Security 'max-age=15552000';
+    include /etc/nginx/ssl.conf;
 
     location / {
         return 301 https://loglist.net$request_uri;

ctor/etc/nginx/sites-available/tales

@@ -2,11 +2,7 @@ server {
     listen 443 ssl;
     server_name tales.codingteam.org.ru;
     keepalive_timeout 60;
-    ssl_certificate /etc/letsencrypt/live/loglist.net/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/loglist.net/privkey.pem;
-    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_ciphers  "HIGH:!aNULL:!MD5:!kEDH";
-    add_header Strict-Transport-Security 'max-age=15552000';
+    include /etc/nginx/ssl.conf;
 
     location / {
         alias /opt/codingteam/tales/;

ctor/etc/nginx/ssl.conf

@@ -0,0 +1,5 @@
+ssl_certificate /etc/letsencrypt/live/loglist.net/fullchain.pem;
+ssl_certificate_key /etc/letsencrypt/live/loglist.net/privkey.pem;
+ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ssl_ciphers  "HIGH:!aNULL:!MD5:!kEDH";
+add_header Strict-Transport-Security 'max-age=15552000';