# i have no idea what this section is for, but the site won't work without it
events {
   worker_connections 2048;
}

http {
   include mime.types;

   ssl_certificate /etc/letsencrypt/live/git.user333.sweeux.org/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/git.user333.sweeux.org/privkey.pem;

   port_in_redirect off;

   include /etc/letsencrypt/options-ssl-nginx.conf;
   ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
   
   server {
      listen 8443 ssl;
      listen 8080;
      server_name user333.sweeux.org;

      location / {
         root /srv/http/user333.sweeux.org;
      }
      
      location /f/ {
         proxy_pass http://127.0.0.1:7000/;
      }

      location /p/ {
         proxy_pass http://127.0.0.1:6157/;
      }

      location /git {
         return 301 https://git.user333.sweeux.org/;
      }
   }

   server {
      listen 8443 ssl;
      listen 8080;
      server_name git.user333.sweeux.org;
      
      location / {
        proxy_pass http://127.0.0.1:3001/;
        proxy_set_header Connection $http_connection;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Host $host;
        proxy_set_header X-Real-Ip $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        client_max_body_size 512M;
      }
   }
}