server {
  listen 80;
  server_name www.rar.folkprog.net rar.folkprog.net;
  return 301 https://$host$request_uri;
}

server {
  listen 80;
  server_name www.rar.folkprog.net;
  return 301 https://rar.folkprog.net$request_uri;

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/letsencrypt/live/rar.folkprog.net/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/rar.folkprog.net/privkey.pem; # managed by Certbot
}

server {
  listen 80;
  server_name rar.folkprog.net;
  root /app/public;

#  auth_basic           "tmp restricted";
#  auth_basic_user_file /etc/apache2/.htpasswd;

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/letsencrypt/live/rar.folkprog.net/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/rar.folkprog.net/privkey.pem; # managed by Certbot

  location ^~ /assets {
    root /home/deploy/projects/rails-and-realms.net/web;
    try_files $uri $uri/ =404;
  }

  location ~* ^.+\.(ico|html)$ {
    root /home/deploy/projects/rails-and-realms.net/web;
    try_files $uri $uri/ =404;
  }

  location ~* ^.+\.(jpg|jpeg|gif|png|rtf|js|css|woff2|woff)$ {
    proxy_pass http://localhost:8190;
  }

  location ~ ^/index\.php(/|$) {
    fastcgi_pass localhost:9110;
    fastcgi_split_path_info ^(.+\.php)(/.*)$;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param DOCUMENT_ROOT $document_root;
  }

  location ~ \.php$ {
    return 404;
  }

  location / {
    rewrite ^ /index.php?$query_string last;
  }
}