server {
	server_name www.kirsle.net;
	listen 443 ssl;
	listen [::]:443 ssl;

	index index.cgi index.php index.html index.htm;

	access_log /home/kirsle/logs/access_log;
	error_log /home/kirsle/logs/error_log;

	ssl on;
	ssl_certificate /etc/letsencrypt/live/www.kirsle.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/www.kirsle.net/privkey.pem;
	include ssl_params;

	root /home/kirsle/git/rophako;

	location /static {
		alias /home/kirsle/www/static;
	}
	location /creativity {
		alias /home/kirsle/www/creativity;
	}
	location /doc {
		alias /home/kirsle/www/doc;
	}
	location /images {
		alias /home/kirsle/www/images;
	}
	location /mail {
		alias /home/kirsle/www/mail;
	}
	location /piwik {
		alias /home/kirsle/www/piwik;
		index index.php;
	}
	location /projects {
		alias /home/kirsle/www/projects;
	}
	location /wizards {
		alias /home/kirsle/www/wizards;
	}
	location /favicon.ico {
		alias /home/kirsle/www/favicon.ico;
	}

	# uwsgi
	location / {
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto https;
		proxy_redirect off;
		proxy_pass http://127.0.0.1:9000;
	}

	# run php scripts
	location ~ \.php$ {
		include fastcgi_params;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/var/run/php5-fpm.sock;
		fastcgi_index index.php;
		fastcgi_param SCRIPT_FILENAME /home/kirsle/www$fastcgi_script_name;
	}

	# legacy CGI scripts
	# https://wiki.debian.org/nginx/FastCGI
	location ~ \.cgi$ {
		try_files $uri $uri/ /index.cgi;
		gzip off;
		root /home/kirsle/public_html;
		fastcgi_pass unix:/var/run/fcgiwrap.socket;
		include fastcgi_params;
		fastcgi_param SERVER_NAME $host;
	}
}

# Legacy kirsle domains over port 80
server {
	server_name kirsle.net www.kirsle.net .kirsle.com .kirsle.org .cuvou.com .cuvou.net .cuvou.org ckir.net .ckir.net;
	listen 80;
	listen [::]:80;
	return 301 https://www.kirsle.net$request_uri;
}

# SSL, but wrong domain
server {
	server_name kirsle.net .kirsle.com .kirsle.org;
	listen [::]:443 ssl;
	listen 443 ssl;

	ssl on;
	ssl_certificate /etc/letsencrypt/live/www.kirsle.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/www.kirsle.net/privkey.pem;
	include ssl_params;

	return 301 https://www.kirsle.net$request_uri;
}