# -*-nginx-*-
server {
    listen 80;
    server_name fet.at 128.131.95.208 www.fet.at;

    include snippets/letsencrypt.conf;
}


server {
    listen 443 ssl http2;
    server_name www.fet.at;

    ssl_certificate /etc/letsencrypt/live/www.fet.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.fet.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/www.fet.at/chain.pem;
    include snippets/ssl.conf;

    location / {
        return 302 https://fet.at$request_uri;
    }
}

server {
    listen 80;
   server_name legacy.fet.at;

   include snippets/letsencrypt.conf;

    client_max_body_size 50M;

    location /etherpad {
        proxy_pass http://192.168.95.11:3333;
        include snippets/proxy_header.conf;
   }
}

server {
    listen 443 ssl http2;
    server_name legacy.fet.at;

    ssl_certificate /etc/letsencrypt/live/www.fet.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.fet.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/www.fet.at/chain.pem;
    include snippets/ssl.conf;



    client_max_body_size 50M;

    location / {
    include snippets/ldap.conf;
        proxy_pass http://192.168.95.11:3333;
        include snippets/proxy_header.conf;
    }
    location /etherpad {
        proxy_pass http://192.168.95.11:3333;
        include snippets/proxy_header.conf;
   }
 
    location ~ ^/(alt|twiki) {
        return 302 https://www.alt.fet.at$request_uri;
    }
 #   location ~ ^/(labor) {
 #       return 302 https://www.fet.at/themen/8;
  #  }
#}
}


server {
    listen 443 ssl http2;
    server_name fet.at;
    ssl_certificate /etc/letsencrypt/live/www.fet.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.fet.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/www.fet.at/chain.pem;

    include snippets/ssl.conf;

    client_max_body_size 10M;
    
    location /etherpad {
#                return 404 "Wir machen gerade ein Update";
        proxy_pass http://fetsite21:8001;
        include snippets/proxy_header.conf;
#        add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'";
    }

    
    #location /api {
        #return 403 "Contact bofh@fet.at if you really need to access this";
    #}
    location / {
    include snippets/header.conf;
        proxy_pass http://fetsite21:8001;
        include snippets/proxy_header.conf;

    }
    location /admin {
#        return 404 "Wir machen gerade ein Update";
        proxy_pass http://fetsite21:8001;
        include snippets/proxy_header.conf;


    }
    location /api {
        satisfy any;
        allow 192.168.86.0/24;
        include snippets/ldap.conf;
        proxy_pass http://fetsite21:8001;
        include snippets/proxy_header.conf;


    }
}


server {
    listen 443 ssl http2;
    server_name portainer.2020.fet.at;

    ssl_certificate /etc/letsencrypt/live/moses.2020.fet.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/moses.2020.fet.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/moses.2020.fet.at/chain.pem;
    include snippets/ssl.conf;
#    include snippets/ldap.conf;
    client_max_body_size 10M;
    
    location / {

        proxy_pass http://fetsite21:9000;
        include snippets/proxy_header.conf;

    }
}