change nginx config to $server_name

diff --git a/src/configuration/Webservers/nginx/default-hsts b/src/configuration/Webservers/nginx/default-hsts
index befa886..b6745ac 100644 (file)
--- a/src/configuration/Webservers/nginx/default-hsts
+++ b/src/configuration/Webservers/nginx/default-hsts
@@ -26,7 +26,7 @@ server {
 
        # Make site accessible from http://localhost/
        server_name localhost;
-       return 301 https://www.domain.com$request_uri;
+       return 301 https://$server_name$request_uri;
 }
 
 

diff --git a/src/practical_settings/webserver.tex b/src/practical_settings/webserver.tex
index 2449577..730442a 100644 (file)
--- a/src/practical_settings/webserver.tex
+++ b/src/practical_settings/webserver.tex
@@ -116,10 +116,12 @@ If you decide to trust NIST's ECC curve recommendation, you can add the followin
 
 \configfile{default-ec}{119-119}{SSL EC/DH settings for nginx}
 
-You might want to redirect everything to \emph{https://} if possible. In Nginx you can do this with the following setting (replace www.domain.com with your domain):
+You might want to redirect everything to \emph{https://} if possible. In Nginx you can do this with the following setting:
 
 \configfile{default-hsts}{29-29}{https auto-redirect in nginx}
 
+The variable \emph{\$server\_name} refers to the first \emph{server\_name} entry in your config file. If you specify more than one \emph{server\_name} only the first will be taken. Please be sure to not use the \emph{\$host} variable here because it contains data controlled by the user.
+
 \subsubsection{References}
 \begin{itemize*}
   \item \url{http://nginx.org/en/docs/http/ngx_http_ssl_module.html}