server {
    listen 80;
    server_name mail2022.fet.at;# autodiscover.* autoconfig.*;
    return 301 https://mail2022.fet.at$request_uri;
}

server {
    listen 443 ssl;
    server_name mail2022.fet.at;# autodiscover.* autoconfig.*;
    include ssl.conf;
    include ldap.conf;

    set $proxy_host phobos;
    set $proxy_port 443;
    
    client_max_body_size 50M;
    #ssl_protocols TLSv1.2;
    #ssl_ciphers HIGH:!aNULL:!MD5:!SHA1:!kRSA;
    #ssl_prefer_server_ciphers off;
    location / {
      include proxy.conf;
      include secure.conf;
      #proxy_set_header Host $http_host;
      #proxy_set_header X-Real-IP $remote_addr;
      #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      #proxy_set_header X-Forwarded-Proto $scheme;

      more_set_headers "Content-Security-Policy: default-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline' https://mail2022.fet.at/; style-src 'self' 'unsafe-inline' https://mail2022.fet.at/;  font-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' https://mail2022.fet.at/ ; frame-ancestors 'self' "; 
      proxy_pass https://$proxy_host:$proxy_port;
    }
}