server {
    listen                [::]:80;
    server_name           pagure.midipix.org;
    return                301 https://$server_name$request_uri;
}

server {
    listen                [::]:443;
    server_name           pagure.midipix.org;
    root                  /srv/www/htdocs;


    access_log  /var/log/nginx/pagure.access.log;
    error_log   /var/log/nginx/pagure.error.log;


    location @pagure {
        proxy_set_header  Host $http_host;
        proxy_set_header  X-Real-IP $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto $scheme;
        proxy_pass        http://unix:/tmp/.pagure_web.sock;
    }

    location / {
        try_files $uri @pagure;
    }

    location /static {
        alias /usr/lib/python3.6/site-packages/pagure/static/;
    }

    location /releases {
        alias     /srv/www/pagure-releases/;
        autoindex on;
    }

    ssl_certificate       /etc/nginx/certs.d/culturestrings.org/ssl/fullchain.pem;
    ssl_certificate_key   /etc/nginx/certs.d/culturestrings.org/ssl/privkey.pem;

    include conf.d/ssl_params;
}