#upstream terminal-default {
#  zone vaultwarden-default 64k;
#  server localhost:3002;
#  keepalive 2;
#}

log_format vhost '$host $remote_addr - $remote_user [$time_local] '
                 '"$request" $status $body_bytes_sent '
                 '"$http_referer" "$http_user_agent" '
                 '"$upstream_addr" proxyhost:"$proxy_host"';
#upstream terminal-ws {
#  zone vaultwarden-ws 64k;
#  server localhost:3012;
#  keepalive 2;
#}

# Redirect HTTP to HTTPS
server {
    listen 80;
    listen [::]:80;
    server_name conorz.at;

#    location / {
#      root /website;
#      index index.html;
#      try_files $uri $uri/ /index.html;
#    }
    return 301 https://$host$request_uri;
#      error_page 404 /404.html;
#      location = /404.html {
#        root /error_page;
#        internal;
        #proxy_pass http://localhost:3002;
#    }
}

server {
    listen 443 ssl http2;
   # listen [::]:443 ssl http2; 

#    listen 8448 ssl;
#    listen [::]:8448 ssl;

    server_name conorz.at;

# Specify SSL Config when needed
#    ssl_trusted_certificate /etc/nginx/ssl/conorz.at/conorz.at-ssl.pem;
#    ssl_certificate_key /etc/nginx/ssl/conorz.at/conorz.at-privkey.pem;
#    ssl_certificate /etc/nginx/ssl/conorz.at/conorz.at-fullchain.pem;

#    ssl_certificate /etc/nginx/ssl/conorz.at/conorz.at-fullchain.pem;
#    ssl_certificate_key /etc/nginx/ssl/conorz.at/conorz.at-privkey.pem;
#    ssl_trusted_certificate /etc/nginx/ssl/conorz.at/conorz.at-fullchain.pem;

    ssl_certificate /etc/letsencrypt/live/conorz.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/conorz.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/conorz.at/cert.pem;

    error_page 404 /404.html;

    location = /404.html {
      root /website/dist;
      internal;
    }
    error_page 403 /403.html;

    location = /403.html {
      root /website/dist;
      internal;
    }
    client_max_body_size 128M;

    location / {
      root /website/dist;
      index index.html;
#      proxy_http_version 1.1;
#      proxy_set_header "Connection" "";

#      proxy_set_header HOST $host;
#      proxy_set_header X-Real-IP $remote_addr;
#      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#      proxy_set_header X-Forwarded-Proto $scheme;

#      proxy_pass http://terminal-default;
   }

#    location /matrix/nginx-proxy/data/matrix-domain/terminal/test.txt {
#      proxy_http_version 1.1;
#      proxy_set_header "Connection" "";

#      proxy_set_header Host $host;
#      proxy_set_header X-Real-IP $remote_addr;
#      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#      proxy_set_header X-Forwarded-Proto $scheme;

#      proxy_pass http://terminal-default/resume.pdf;
#    }

#    location /gpg/index.html {
#      proxy_http_version 1.1;
#      proxy_set_header Upgrade $http_upgrade;
#      proxy_set_header Connection "upgrade";

#      proxy_set_header Host $host;
#      proxy_set_header X-Real-IP $remote_addr;
#      proxy_set_header Forwarded $remote_addr;
#      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#      proxy_set_header X-Forwarded-Proto $scheme;

#      proxy_pass http://vaultwarden-ws/gpg;
#    }

        location ^~ /_matrix/ {
                proxy_set_header        Host conorz.at;
                proxy_set_header        X-Real-IP $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header        X-Forwarded-Proto $scheme;
                proxy_pass              http://127.0.0.1:8008; 
#use correct protocol (https/http) and correct ip:port
                proxy_read_timeout      90;
        }

}
#    location ^~ /_matrix/ {
#        proxy_pass http://unix:/var/lib/matrix-synapse/matrix-synapse.sock:;
#    }
#}
#server {
#    listen 8448 ssl http2;
   # listen [::]:443 ssl http2;
#    server_name conorz.at;
#    access_log /var/log/nginx/access-matrix-9449.log vhost;

    # Specify SSL Config when needed
#    ssl_certificate /etc/nginx/ssl/conorz.at/matrix.conorz.at-fullchain.pem;
#    ssl_certificate_key /etc/nginx/ssl/conorz.at/matrix.conorz.at-privkey.pem;
#    ssl_trusted_certificate /etc/nginx/ssl/conorz.at/matrix.conorz.at-ssl.pem;

#    ssl_certificate /etc/letsencrypt/live/conorz.at/fullchain.pem;
#    ssl_certificate_key /etc/letsencrypt/live/conorz.at/privkey.pem;
#    ssl_trusted_certificate /etc/letsencrypt/live/conorz.at/cert.pem;

#    client_max_body_size 128M;

#    location / {
#      proxy_http_version 1.1;
#      proxy_set_header "Connection" "";

#      proxy_set_header HOST $host;
#      proxy_set_header X-Real-IP $remote_addr;
#      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#      proxy_set_header X-Forwarded-Proto $scheme;

#      proxy_pass http://terminal-default;
#   }
#        location ^~ /_matrix/ {
#                proxy_set_header        Host conorz.at;
#                proxy_set_header        X-Real-IP $remote_addr;
#                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
#                proxy_set_header        X-Forwarded-Proto $scheme;
#                proxy_pass              http://127.0.0.1:8008;
#                proxy_read_timeout      90;
#        }
#}