From 28d1c382c646037dfa0baea1c072019f37f343ab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Krist=C3=B3fer=20Reykjal=C3=ADn?=
 <kthorlaksson@cese.fraunhofer.org>
Date: Tue, 22 Jan 2019 18:13:57 -0500
Subject: [PATCH] Add support for 'NO_HTTP2' environment variable

To disable support for HTTP/2 for all containers running behind
nginx-proxy, set 'NO_HTTP2' to "true" _on the nginx-proxy container_
---
 nginx.tmpl | 27 ++++++++++++++++++++++++---
 1 file changed, 24 insertions(+), 3 deletions(-)

diff --git a/nginx.tmpl b/nginx.tmpl
index d861050..6f74d25 100644
--- a/nginx.tmpl
+++ b/nginx.tmpl
@@ -99,11 +99,18 @@ server {
 	return 503;
 }
 
+{{ $no_http2 := eq (or ($.Env.NO_HTTP2) "" ) "true" }}
 {{ if (and (exists "/etc/nginx/certs/default.crt") (exists "/etc/nginx/certs/default.key")) }}
 server {
 	server_name _; # This is just an invalid value which will never trigger on a real hostname.
+	{{ if $no_http2 }}
+	listen 443 ssl;
+	{{ else }}
 	listen 443 ssl http2;
-	{{ if $enable_ipv6 }}
+	{{ end }}
+	{{ if (and $enable_ipv6 $no_http2) }}
+	listen [::]:443 ssl;
+	{{ else if $enable_ipv6 }}
 	listen [::]:443 ssl http2;
 	{{ end }}
 	access_log /var/log/nginx/access.log vhost;
@@ -204,10 +211,17 @@ server {
 
 server {
 	server_name {{ $host }};
+	{{ if $no_http2 }}
+	listen 443 ssl {{ $default_server }};
+	{{ else }}
 	listen 443 ssl http2 {{ $default_server }};
-	{{ if $enable_ipv6 }}
+	{{ end }}
+	{{ if (and $enable_ipv6 $no_http2) }}
+	listen [::]:443 ssl {{ $default_server }};
+	{{ else if $enable_ipv6 }}
 	listen [::]:443 ssl http2 {{ $default_server }};
 	{{ end }}
+
 	access_log /var/log/nginx/access.log vhost;
 
 	{{ if eq $network_tag "internal" }}
@@ -345,10 +359,17 @@ server {
 {{ if (and (not $is_https) (exists "/etc/nginx/certs/default.crt") (exists "/etc/nginx/certs/default.key")) }}
 server {
 	server_name {{ $host }};
+	{{ if $no_http2 }}
+	listen 443 ssl {{ $default_server }};
+	{{ else }}
 	listen 443 ssl http2 {{ $default_server }};
-	{{ if $enable_ipv6 }}
+	{{ end }}
+	{{ if (and $enable_ipv6 $no_http2) }}
+	listen [::]:443 ssl {{ $default_server }};
+	{{ else if $enable_ipv6 }}
 	listen [::]:443 ssl http2 {{ $default_server }};
 	{{ end }}
+
 	access_log /var/log/nginx/access.log vhost;
 	return 500;