# configuration of the server
server {
    # the port your site will be served on
    listen      0.0.0.0:8805;  # TODO

    ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers          ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers  on;
    ssl_session_cache    shared:SSL:10m;
    ssl_session_timeout  10m;

    # the domain name it will serve for
    server_name 127.0.0.1 192.168.* catou8 localhost 192.168.5.246 192.168.4.246 192.168.9.246;
    charset     utf-8;

    root /secret_path/static;
    # max upload size
    client_max_body_size 75M;   # adjust to taste
    location /.well-known/pki-validation/ {
    }

    location /favicon.ico {
        alias /secret_path/static/img/favicon.ico ;
    }

    location /static {
        alias /secret_path/static ;
    }

    location /media {
            alias /secret_path/media ;
        }

    # Finally, send all non-media requests to the Django server.
    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $http_host;
        # we don't want nginx trying to do something clever with
        # redirects, we set the Host: header above already.
        proxy_redirect off;
        proxy_buffering off;
        proxy_pass http://web:8000;  # TODO
    }

}