# -*-nginx-*-
server {
    listen 80;
    server_name www.crawler.fachschaften.at crawler.fachschaften.at;
    
    location /.well-known {
        root /srv/pxy/fachschaften;
        allow all;
    }
    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl http2;
    server_name www.crawler.fachschaften.at crawler.fachschaften.at;
    
    ssl_certificate /etc/letsencrypt/live/www.fachschaften.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.fachschaften.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/www.fachschaften.at/chain.pem;

    include snippets/ssl.conf;

    location /sections {
        auth_basic " under construction ";
        auth_basic_user_file /srv/fachschaften_htpasswd;
        
        try_files $uri @crawler;
    }
    location /articles {
        satisfy any;
        auth_basic " under construction ";
        auth_basic_user_file /srv/fachschaften_htpasswd;
        deny all;
        allow 192.168.95.0/24;
        try_files $uri @crawler;
    }
    location /downloads {
        try_files $uri @crawler;
    }
    location @crawler {
        proxy_pass http://fachschaften:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }      
}

#       error_page 503 404 410 /404.html;
#       access_log /var/log/crawler/nginxaccess.log;
#       error_log /var/log/crawler/nginxerror.log;