From b01d4e8f1eb78d21b0e46427c55545bf4fa36609 Mon Sep 17 00:00:00 2001
From: lingkai5wu <lingkai5wu@outlook.com>
Date: Mon, 12 Oct 2026 12:54:07 +0800
Subject: [PATCH] feat: migrate SSL configuration to centralized https.conf
 snippet

---
 conf.d/adguardhome.conf.template                     | 3 +--
 conf.d/backrest.conf.template                        | 3 +--
 conf.d/gitea.conf.template                           | 4 +---
 conf.d/homeassistant.conf.template                   | 4 +---
 conf.d/immich.conf.template                          | 4 +---
 conf.d/openlist.conf.template                        | 4 +---
 conf.d/qbittorrent.conf.template                     | 4 +---
 snippets/{cert.conf.template => https.conf.template} | 3 +++
 8 files changed, 10 insertions(+), 19 deletions(-)
 rename snippets/{cert.conf.template => https.conf.template} (76%)

diff --git a/conf.d/adguardhome.conf.template b/conf.d/adguardhome.conf.template
index fa28f27..75fb808 100644
--- a/conf.d/adguardhome.conf.template
+++ b/conf.d/adguardhome.conf.template
@@ -1,6 +1,5 @@
 server {
-    listen 443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name adguard.${BASE_DOMAIN};
 
diff --git a/conf.d/backrest.conf.template b/conf.d/backrest.conf.template
index 5e605ea..14c420d 100644
--- a/conf.d/backrest.conf.template
+++ b/conf.d/backrest.conf.template
@@ -1,6 +1,5 @@
 server {
-    listen 443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name backrest.${BASE_DOMAIN};
 
diff --git a/conf.d/gitea.conf.template b/conf.d/gitea.conf.template
index 45cf26b..14ab823 100644
--- a/conf.d/gitea.conf.template
+++ b/conf.d/gitea.conf.template
@@ -1,7 +1,5 @@
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name gitea.${BASE_DOMAIN};
 
diff --git a/conf.d/homeassistant.conf.template b/conf.d/homeassistant.conf.template
index d25cd0f..f066298 100644
--- a/conf.d/homeassistant.conf.template
+++ b/conf.d/homeassistant.conf.template
@@ -1,7 +1,5 @@
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name ha.${BASE_DOMAIN};
 
diff --git a/conf.d/immich.conf.template b/conf.d/immich.conf.template
index 46a3011..080004b 100644
--- a/conf.d/immich.conf.template
+++ b/conf.d/immich.conf.template
@@ -1,7 +1,5 @@
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name immich.${BASE_DOMAIN};
 
diff --git a/conf.d/openlist.conf.template b/conf.d/openlist.conf.template
index 122f02c..f45346c 100644
--- a/conf.d/openlist.conf.template
+++ b/conf.d/openlist.conf.template
@@ -1,7 +1,5 @@
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name openlist.${BASE_DOMAIN};
 
diff --git a/conf.d/qbittorrent.conf.template b/conf.d/qbittorrent.conf.template
index 7b979e0..003fc16 100644
--- a/conf.d/qbittorrent.conf.template
+++ b/conf.d/qbittorrent.conf.template
@@ -1,7 +1,5 @@
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    include snippets/cert.conf;
+    include snippets/https.conf;
 
     server_name qbt.${BASE_DOMAIN};
 
diff --git a/snippets/cert.conf.template b/snippets/https.conf.template
similarity index 76%
rename from snippets/cert.conf.template
rename to snippets/https.conf.template
index 73098a5..d62db42 100644
--- a/snippets/cert.conf.template
+++ b/snippets/https.conf.template
@@ -1,2 +1,5 @@
+listen 443 ssl;
+listen [::]:443 ssl;
+
 ssl_certificate /etc/nginx/certs/${BASE_DOMAIN}/fullchain.pem;
 ssl_certificate_key /etc/nginx/certs/${BASE_DOMAIN}/key.pem;