worker_processes  1;

events {
    worker_connections  1024;
    use epoll;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    tcp_nopush      on;

    keepalive_timeout  65;

    include conf.d/*.conf;

    server {
        listen       [::]:80 default_server ipv6only=off reuseport;
        server_name  localhost;

        location / {
            root   /srv/www/htdocs/;
            index  index.html index.htm;
        }

        error_page 500 502 503 504  /50x.html;

        location = /50x.html {
            root   /srv/www/htdocs/;
        }
    }

    server {
        listen       [::]:443 default_server ssl http2 ipv6only=off reuseport;
        server_name  localhost;

        ssl_certificate           /srv/webroot/@hostzone@/ssl/fullchain.pem;
        ssl_certificate_key       /srv/webroot/@hostzone@/ssl/privkey.pem;
        ssl_trusted_certificate   /srv/webroot/@hostzone@/ssl/chain.pem;

        location / {
            root   /srv/www/htdocs/;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   /srv/www/htdocs/;
        }

    }

    include conf.d/ssl_params;
    include vhosts.d/*.conf;
}