nginx/default

# Redirect all http traffic to https
server {
    listen 80;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2 default_server;
    server_name DIT_DOMAIN.duckdns.org;
    root /config/www/Dashboard;
    index index.html index.htm index.php;

    client_max_body_size 0;

    #SSL settings
    ssl_certificate /etc/letsencrypt/live/DIT_DOMAIN.duckdns.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/DIT_DOMAIN.duckdns.org/privkey.pem;
    ssl_protocols TLSv1.1 TLSv1.2;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
    ssl_prefer_server_ciphers on;

    location / {
        try_files $uri $uri/ /index.html /index.php?$args =404;
    }

    location ~ \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        # With php5-cgi alone:
        fastcgi_pass 127.0.0.1:9000;
        # With php5-fpm:
        #fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include /etc/nginx/fastcgi_params;
    }

    # BLOCK ORGANIZR DASHBOARD FILES
    location ~ /loginLog.json|chat.db|users.db|org.log {
        return 404;
    }

    location /auth-admin {
        internal;
        proxy_pass http://organizr/auth.php?admin;
        proxy_set_header Content-Length "";
    }

    location /auth-user {
        internal;
        proxy_pass http://organizr/auth.php?user;
        proxy_set_header Content-Length "";
    }
}