updates

snippets/add_auto_ssl.conf

@@ -0,0 +1,14 @@
+ssl_certificate_by_lua_block {
+      auto_ssl:ssl_certificate()
+}
+
+    # You must still define a static ssl_certificate file for nginx to start.
+    #
+    # You may generate a self-signed fallback with:
+    #
+    # openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 \
+    #   -subj '/CN=sni-support-required-for-valid-ssl' \
+    #   -keyout /etc/ssl/resty-auto-ssl-fallback.key \
+    #   -out /etc/ssl/resty-auto-ssl-fallback.crt
+ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
+ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;

snippets/auto_ssl.conf

@@ -1,14 +1,5 @@
-ssl_certificate_by_lua_block {
-      auto_ssl:ssl_certificate()
-}
-
-    # You must still define a static ssl_certificate file for nginx to start.
-    #
-    # You may generate a self-signed fallback with:
-    #
-    # openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 \
-    #   -subj '/CN=sni-support-required-for-valid-ssl' \
-    #   -keyout /etc/ssl/resty-auto-ssl-fallback.key \
-    #   -out /etc/ssl/resty-auto-ssl-fallback.crt
-ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
-ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;
+location /.well-known/acme-challenge/ {
+      content_by_lua_block {
+        auto_ssl:challenge_server()
+      }
+    }

snippets/get_auto_ssl.conf

@@ -1,5 +0,0 @@
-location /.well-known/acme-challenge/ {
-      content_by_lua_block {
-        auto_ssl:challenge_server()
-      }
-    }

snippets/private.conf

@@ -0,0 +1 @@
+include ldap.conf;

snippets/secure.conf

@@ -0,0 +1 @@
+include add_auto_ssl.conf;