# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# configuration of frodr.com / frode klevstul / oct 2025
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

# enforce ssl and bare domain (without www) for http requests
# ($server_name will return the first value given)
server {
    listen 80;
    server_name frodr.com www.frodr.com;
    return 301 https://$server_name$request_uri;
}

# www to bare domain for https requests
server {
    listen 443 ssl;
    listen [::]:443 ssl;
    http2 on;

    ssl_certificate /etc/nginx/acme.sh/frodr.com/fullchain.pem;
    ssl_certificate_key /etc/nginx/acme.sh/frodr.com/key.pem;
    ssl_trusted_certificate /etc/nginx/acme.sh/frodr.com/cert.pem;

    server_name www.frodr.com;
    return 301 $scheme://frodr.com$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    http2 on;

    ssl_certificate /etc/nginx/acme.sh/frodr.com/fullchain.pem;
    ssl_certificate_key /etc/nginx/acme.sh/frodr.com/key.pem;
    ssl_trusted_certificate /etc/nginx/acme.sh/frodr.com/cert.pem;

    root /var/www/frodr.com/jongleur;
    index index.html;
    server_name frodr.com;

    error_page 404 /assets/404.html;
}