feat(nginx-proxy): Add SSL_STAPLING env var to control OCSP stapling

[mrrobot47]

Summary

Add SSL_STAPLING environment variable to allow disabling OCSP stapling for certificates without OCSP responder URLs.

Problem

Nginx logs warnings for certificates that don't have OCSP responder URLs:

nginx: [warn] "ssl_stapling" ignored, no OCSP responder URL in the certificate

This is common with self-signed certificates or certificates from CAs that don't provide OCSP.

Solution

Add SSL_STAPLING environment variable (default: on) that can be set to off to disable OCSP stapling.

Usage

environment:
  - SSL_STAPLING=off

Changes

• nginx.tmpl: Added SSL_STAPLING env var support with conditional check before enabling ssl_stapling
• README.md: Documented the new environment variable

---

Note: We also investigated fixing the nginx: [warn] protocol options redefined for 0.0.0.0:443 warning related to http2 on; directives. After testing multiple approaches (global http2, per-server-block http2, removing http2 from non-default blocks), we determined this is expected nginx 1.25.1+ behavior for multi-vhost SNI setups and cannot be fixed with template changes. The warning is benign and does not affect functionality.

[Copilot]

Pull request overview

This PR fixes nginx warning logs by correcting the placement of the http2 directive and adding optional control for SSL stapling via environment variable.

Changes:

• Moved http2 on; directive outside of listen blocks to prevent duplication warnings in nginx 1.25.1+
• Added SSL_STAPLING environment variable to allow disabling OCSP stapling for certificates without OCSP support
• Updated documentation to include the new SSL_STAPLING variable

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
nginx-proxy/nginx.tmpl	Relocated http2 on; to server-level (3 locations) and added conditional SSL stapling based on SSL_STAPLING environment variable
nginx-proxy/README.md	Added documentation for the new SSL_STAPLING environment variable

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.