# nginx.conf
user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    gzip  on;

    gzip_static on;

    gzip_http_version 1.0;

    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript application/wasm;

    # Existing server block for HTTP
    server {
        listen       80;
        server_name  localhost;
        #server_name appflowy.com *.appflowy.com;

        location / {
            return 301 https://$host$request_uri;
        }

    }

    # Additional server block for HTTPS
    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name  localhost;
        #server_name appflowy.com *.appflowy.com;

        ssl_certificate      /etc/ssl/certs/nginx-signed.crt;
        ssl_certificate_key  /etc/ssl/private/nginx-signed.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   /usr/share/nginx/html;
            index  index.html index.htm;
        }

        error_page  404 /404.html;
        location = /404.html {
            root   /usr/share/nginx/html;
        }

        error_page  500 502 503 504 /50x.html;
        location = /50x.html {
            root   /usr/share/nginx/html;
        }
    }
}