ansible/roles/mail/templates/nginx/vhost.j2

server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	ssl_certificate /etc/nginx/ssl/{{ mailman_domain }}.crt;
	ssl_certificate_key /etc/nginx/ssl/{{ mailman_domain }}.key;

	server_name {{ mailman_domain }};

	location = / {
		rewrite ^ /listinfo permanent;
	}

	location / {
		root /usr/lib/cgi-bin/mailman/;
		fastcgi_split_path_info (^/[^/]*)(.*)$;
		include /etc/nginx/fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
		fastcgi_intercept_errors on;
		fastcgi_pass unix:/var/run/fcgiwrap.socket;
	}

	location /images/mailman {
		alias /usr/share/images/mailman;
	}

	location /pipermail {
		alias /var/lib/mailman/archives/public;
		autoindex on;
	}
}