agaric-coop/box/docs/configurations/webservers-nginx.md

To use Nginx instead of Apache, change the drupalvm_webserver variable inside your customized config.yml, from apache to nginx.

Because Nginx server directives behave a little differently than Apache's VirtualHosts, Drupal VM includes a custom Drupal-optimized Nginx server block configuration, and you can control all the servers ('virtual hosts') Nginx will run using the nginx_vhosts configuration. A few simple examples are shown in default.config.yml, but you have some extra flexibility if you need it. See the nginx-vhost.conf.j2 template for more information.

Also, see the examples included in the geerlingguy.nginx Ansible role's README for more info, as well as many other variables you can override to configure Nginx exactly how you like it.

Note: if you're using php-fpm, you may want to reflect your use of nginx by setting php_fpm_pool_user and php_fpm_pool_group in your config.yml.

Enable SSL Support with Nginx

To enable SSL support for you virtual hosts you first need a certificate file. See the same section under the Apache documentation for how to generate a self-signed certficiate.

Modify your nginx host configuration by adding the following extra_parameters to the first entry in nginx_vhosts:

- server_name: "{{ drupal_domain }} www.{{ drupal_domain }}"
  root: "{{ drupal_core_path }}"
  is_php: true
  extra_parameters: |
        listen 443 ssl;
        ssl_certificate     /vagrant/example.crt;
        ssl_certificate_key /vagrant/example.key;
        ssl_protocols       TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;        

Using Ubuntu's snakeoil certificate

If you are using Ubuntu as your base OS and you want to get started quickly with a local development environment you can use the snakeoil certificate that is already generated.

- server_name: "{{ drupal_domain }} www.{{ drupal_domain }}"
  root: "{{ drupal_core_path }}"
  is_php: true
  extra_parameters: |
        listen 443 ssl;
        ssl_certificate     /etc/ssl/certs/ssl-cert-snakeoil.pem;
        ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
        ssl_protocols       TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;        

Customizing server block configuration

If you can't customize via variables because an option isn't exposed, you can override the template used to generate the the virtualhost configuration file.

nginx_vhost_template: "{{ config_dir }}/templates/nginx-vhost.conf.j2"

You can either copy and modify the provided nginx-vhost.conf.j2 template, or extend it and use template inheritace to override the specific template block you need to change.

If you extend Drupal VM's provided base template, the path referenced should to be relative to playbook.yml.

{% extends 'templates/nginx-vhost.conf.j2' %}

{% block location_primary %}
location / {
    try_files $uri @rewrite; # For Drupal <= 6
}
{% endblock %}

{% block location_image_styles %}
location ~ ^/sites/.*/files/imagecache/ {
    try_files $uri @rewrite; # For Drupal <= 6
}
{% endblock %}

If you need to append or prepend content to a block, you can use the {{ super() }} Jinja2 function to return the original block content from the base template.

{% block location_deny %}
{{ super() }}
location ~* \.(txt|log)$ {
    allow 192.168.0.0/16;
    deny all;
}
{% endblock %}