infra/roles/mail/templates/nginx/vhost.j2

server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	ssl_certificate /etc/nginx/ssl/{{ mailman_domain }}.crt;
	ssl_certificate_key /etc/nginx/ssl/{{ mailman_domain }}.key;

	server_name {{ mailman_domain }};

	root /usr/lib/cgi-bin/mailman/;

	location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /var/www/acme-challenge;
	}

	location = / {
		rewrite ^ /listinfo permanent;
	}

	location / {
		root /usr/lib/cgi-bin/mailman;
		fastcgi_split_path_info (^/[^/]*)(.*)$;
		fastcgi_pass unix:///var/run/fcgiwrap.socket;
		include /etc/nginx/fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $fastcgi_path_info;
	}

	location /images/mailman {
		alias /usr/share/images/mailman;
	}

	location /pipermail {
		alias /var/lib/mailman/archives/public;
		autoindex on;
	}
}