worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    #tcp_nopush     on;

    client_max_body_size 32M;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server_names_hash_bucket_size 128;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
    }

#
# Nasqueron
#

    server {
        listen 80;
	listen [::]:80;
        server_name dwellers.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/dwellers.crt;
        ssl_certificate_key /etc/nginx/ssl/dwellers.key;

        location / {
            root   html;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

    server {
        listen 80;
	listen [::]:80;
        server_name phabricator.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;

        rewrite ^ https://devcentral.nasqueron.org$request_uri? permanent;
    }

    server {
        listen 80;
	listen [::]:80;
        server_name phabricator-files-for-devcentral-nasqueron.spacetechnology.net;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator-files-for-devcentral-nasqueron.spacetechnology.net/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator-files-for-devcentral-nasqueron.spacetechnology.net/privkey.pem;

        include proxy_params;
        location / {
                proxy_pass http://localhost:31080;
        }
    }

    server {
        listen 80;
	listen [::]:80;
        server_name devcentral.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/devcentral.crt;
        ssl_certificate_key /etc/nginx/ssl/devcentral.key;

        include proxy_params;
        location / {
		proxy_pass http://localhost:31080;
	}

	location ~ ^/maniphest/task/create {
		rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
	}

        #502 error
        root /var/wwwroot/devcentral.nasqueron.org;
        error_page 502 /502.html;
	location /502.html {}
    }

    server {
        listen 80;
	listen [::]:80;
        server_name server.nasqueron.org serveur.nasqueron.org serveurs.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;

        rewrite ^ https://servers.nasqueron.org$request_uri? permanent;
    }

    server {
        listen 80;
	listen [::]:80;
        server_name forum.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/forum.crt;
        ssl_certificate_key /etc/nginx/ssl/forum.key;

        root /var/wwwroot/forum.nasqueron.org;
        error_page 502 /502.html;

        include proxy_params;
        #location / { proxy_pass http://localhost:32000; }
        location / {
            proxy_pass http://localhost:32080;
        }

	location /502.html {}
    }

    server {
        listen 80;
	listen [::]:80;
        server_name notifications.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/notifications.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/notifications.nasqueron.org/privkey.pem;

        root /var/wwwroot/notifications.nasqueron.org;
        error_page 502 /502.html;

#       include proxy_params;
        location / {
            # TODO: switch from dev to prod when T674 is resolved
            # !!! Don't forget to uncomment include proxy_params !!!
            # proxy_pass http://localhost:37080;
            proxy_pass http://notifications-dereckson.c9users.io;
        }

	location /502.html {}
    }

    server {
        listen 80;
	listen [::]:80;
        server_name servers.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;

        root /var/wwwroot/devcentral.nasqueron.org;
        error_page 502 /502-servers.html;

        location / {
            include proxy_params;
            proxy_pass http://localhost:31080;
        }

	location ~ T[0.9]* {
	    rewrite ^ http://devcentral.nasqueron.org$request_uri? redirect;
	}

        location /tag/ {
	    rewrite ^ http://devcentral.nasqueron.org$request_uri? redirect;
        }

	location /502-servers.html {}
    }

#    server {
#        listen 80;
#	listen [::]:80;
#        server_name engelbart-phabricator.trantorium.com phabricator-files-for-engelbart.radioactif.org;
#
#        include proxy_params;
#        location / { proxy_pass http://localhost:41080; }
#    }

    server {
        listen 80;
	listen [::]:80;
        server_name pad.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/pad.crt;
        ssl_certificate_key /etc/nginx/ssl/pad.key;

        include proxy_params;
        location / { proxy_pass http://localhost:34080; }

        root /var/wwwroot/$server_name;
        error_page 502 /502.html;
	location /502.html {}
    }

   server {
        listen 80;
        listen [::]:80;
        server_name ci.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/ci.crt;
        ssl_certificate_key /etc/nginx/ssl/ci.key;

        include proxy_params;
        location / { proxy_pass http://localhost:38080; }

        #root /var/wwwroot/$server_name;
        #error_page 502 /502.html;
        #location /502.html {}
    }

   server {
        listen 80;
        listen [::]:80;
        server_name builds.nasqueron.org build.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/notifications.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/notifications.nasqueron.org/privkey.pem;

        include proxy_params;
        location / { proxy_pass http://localhost:24080; }
    }

    server {
        listen 80;
        listen [::]:80;
        server_name adjutage.nasqueron.org;

        include proxy_params;

        location / {
            proxy_pass http://localhost:28080;
        }
    }

    server {
        listen 80;
	listen [::]:80;
        server_name deck.nasqueron.org rundeck.nasqueron.org;

        include proxy_params;
        location / { proxy_pass http://localhost:4440; }
    }

    server {
        listen 80;
	listen [::]:80;
        server_name white-rabbit.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;

        location / {
            # Proxy to Web-Stomp (SockJS)
            proxy_pass http://localhost:15674;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
        }
    }

    server {
        listen 80;
        listen [::]:80;
        server_name status.nasqueron.org;

        include letsencrypt;
        include ssl_params;
        ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;

        include proxy_params;
        location / {
            proxy_pass http://localhost:39080;
        }
    }


#
# Mail infrastructure
#

    server {
        listen 80;
	listen [::]:80;
        server_name vma.nasqueron.org mail.nasqueron.org mail.bioty.co mail.wolfplex.be mail.dereckson.be;

        include letsencrypt;

        return 301 https://$host$request_uri;
    }

    server {
        server_name vma.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/vma.crt;
        ssl_certificate_key /etc/nginx/ssl/vma.key;

        include proxy_params;
        location / {
	    proxy_pass http://vma.nasqinternal;
        }

        #502 error
        root /var/wwwroot/mail.nasqueron.org;
        error_page 502 /502.html;
	location /502.html {}
	location /airmail.jpg {}
    }

    server {
        server_name mail.nasqueron.org;
        include mailserver_params;

        # If you wish migrate from Startcom to Let's encrypt:
        #
        # ssl_certificate /data/letsencrypt/etc/live/mail.nasqueron.org/fullchain.pem;
        # ssl_certificate_key /data/letsencrypt/etc/live/mail.nasqueron.org/privkey.pem;
        #
        # It's also possible to prepend mail.nasqueron.org to the next block instead.

        ssl_certificate /etc/nginx/ssl/mailserver.crt;
        ssl_certificate_key /etc/nginx/ssl/mailserver.key;
    }

    server {
        server_name mail.wolfplex.be mail.bioty.co mail.dereckson.be;
        include mailserver_params;

        ssl_certificate /data/letsencrypt/etc/live/mail.nasqueron.org/fullchain.pem;
        ssl_certificate_key /data/letsencrypt/etc/live/mail.nasqueron.org/privkey.pem;
    }

#
# Espace Win
#

    server {
       listen 80;
       listen [::]:80;
       server_name bugzilla.espace-win.org;

       include proxy_params;
       location / { proxy_pass http://localhost:33080; }
    }

#
# Zed
#

    server {
        listen 80;
	listen [::]:80;
        server_name code.zed.dereckson.be;

        include proxy_params;
        location / { proxy_pass http://localhost:36080; }

	location ~ ^/maniphest/task/create {
		rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
	}

    }

#
# Wolfplex
#

    server {
        listen 80;
	listen [::]:80;
        server_name pad.wolfplex.be;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/pad.wolfplex.be.crt;
        ssl_certificate_key /etc/nginx/ssl/pad.wolfplex.be.key;

        include proxy_params;
        location / { proxy_pass http://localhost:34080; }

        root /var/wwwroot/pad.nasqueron.org;
        error_page 502 /502.html;
	location /502.html {}

    }

    server {
        listen 80;
	listen [::]:80;
        server_name phabricator-files-for-wolfplex.nasqueron.org;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/phabricator-files-for-wolfplex.crt;
        ssl_certificate_key /etc/nginx/ssl/phabricator-files-for-wolfplex.key;

        include proxy_params;
        location / { proxy_pass http://localhost:35080; }

	location ~ ^/maniphest/task/create {
		rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
	}
    }

    server {
        listen 80;
	listen [::]:80;
        server_name phabricator.wolfplex.be;

        return 301 https://phabricator.wolfplex.be$request_uri;
    }

    server {
        server_name phabricator.wolfplex.be;

        include ssl_params;
        ssl_certificate /etc/nginx/ssl/phabricator.wolfplex.be.crt;
        ssl_certificate_key /etc/nginx/ssl/phabricator.wolfplex.be.key;

        include proxy_params;
        location / { proxy_pass http://localhost:35080; }

        location = /ws/ {
            proxy_pass http://localhost:22280/;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_read_timeout 999999999;
        }
    }
}