server {
    listen                [::]:80;
    server_name           @sitesubd@;
    return                301 https://$server_name$request_uri;
}

server {
    listen                [::]:443;
    server_name           @sitesubd@;
    root                  /srv/www/htdocs;


    access_log  /var/log/nginx/pagure_access.log;
    error_log   /var/log/nginx/pagure_error.log;


    location @pagure {
        proxy_set_header  Host $http_host;
        proxy_set_header  X-Real-IP $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto $scheme;
        proxy_pass        http://unix:/tmp/.pagure_web.sock;
    }

    location / {
        try_files $uri @pagure;
    }

    location /static {
        alias /usr/lib/python3.6/site-packages/pagure/static/;
    }

    location /releases {
        alias     /srv/www/pagure-releases/;
        autoindex on;
    }

    ssl_certificate           /srv/webroot/@sitezone@/ssl/fullchain.pem;
    ssl_certificate_key       /srv/webroot/@sitezone@/ssl/privkey.pem;
    ssl_trusted_certificate   /srv/webroot/@sitezone@/ssl/chain.pem;

    include conf.d/ssl_params;
}