# nginx config for kirsle.net server { server_name www.kirsle.net; listen 443 ssl; listen [::]:443 ssl; index index.cgi index.php index.html index.htm; access_log /home/kirsle/logs/access_log; error_log /home/kirsle/logs/error_log; ssl on; ssl_certificate /etc/letsencrypt/live/www.kirsle.net/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/www.kirsle.net/privkey.pem; include ssl_params; root /home/kirsle/git/rophako; location /static { alias /home/kirsle/www/static; } location /creativity { alias /home/kirsle/www/creativity; } location /doc { alias /home/kirsle/www/doc; } location /images { alias /home/kirsle/www/images; } location /mail { alias /home/kirsle/www/mail; } location /piwik { alias /home/kirsle/www/piwik; index index.php; } location /projects { alias /home/kirsle/www/projects; } location /wizards { alias /home/kirsle/www/wizards; } location /favicon.ico { alias /home/kirsle/www/favicon.ico; } # uwsgi location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; proxy_redirect off; proxy_pass http://127.0.0.1:9000; } # run php scripts location ~ \.php$ { include fastcgi_params; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /home/kirsle/www$fastcgi_script_name; } # legacy CGI scripts # https://wiki.debian.org/nginx/FastCGI location ~ \.cgi$ { try_files $uri $uri/ /index.cgi; gzip off; root /home/kirsle/public_html; fastcgi_pass unix:/var/run/fcgiwrap.socket; include fastcgi_params; fastcgi_param SERVER_NAME $host; } } # Legacy kirsle domains over port 80 server { server_name kirsle.net www.kirsle.net .kirsle.com .kirsle.org .cuvou.com .cuvou.net .cuvou.org ckir.net .ckir.net; listen 80; listen [::]:80; return 301 https://www.kirsle.net$request_uri; } # SSL, but wrong domain server { server_name kirsle.net .kirsle.com .kirsle.org; listen [::]:443 ssl; listen 443 ssl; ssl on; ssl_certificate /etc/letsencrypt/live/www.kirsle.net/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/www.kirsle.net/privkey.pem; include ssl_params; return 301 https://www.kirsle.net$request_uri; }