Rebase nginx configs for Funkwhale v1.3.0

The current ansible role produces an nginx config incompatible with Funkwhale 1.3.0. This rewrites the role's template based on the current example from the Funkwhale repo.

I think this should be drop-in, provided the version of funkwhale being installed is 1.3.0+ and all clients support TLSv1.3. If backwards compatibility with <1.3.0 or TLSv1.2 is important, I can try to re-add it in conditionals.

I have been running this for a couple days on my personal instance, but I don't have a setup conducive to testing every option handled by the template (TLS termination, certbot, etc).

defaults/main.yml

@@ -40,7 +40,7 @@ funkwhale_letsencrypt_certbot_flags:
 funkwhale_letsencrypt_enabled: true
 funkwhale_letsencrypt_skip_cert: false
 
-funkwhale_nginx_csp_policy: "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; object-src 'none'; media-src 'self' data:"
+funkwhale_nginx_csp_policy: "default-src 'self'; connect-src https: wss: http: ws: 'self' 'unsafe-eval'; script-src 'self' 'wasm-unsafe-eval'; style-src https: http: 'self' 'unsafe-inline'; img-src https: http: 'self' data:; font-src https: http: 'self' data:; media-src https: http: 'self' data:; object-src 'none'"
 funkwhale_redis_managed: true
 funkwhale_api_ip: 127.0.0.1
 funkwhale_api_port: 5000