worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include              mime.types;
    default_type         application/octet-stream;
    sendfile             on;
    keepalive_timeout    65;
    gzip                 on;
    types_hash_max_size  4096;

    server {
        listen 80;
        listen [::]:80;
        server_name _;
        return 301 https://$host$request_uri;
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  home.hak8or.com www.home.hak8or.com;
        access_log   /var/log/nginx/home.access.log;

        ssl_certificate /etc/letsencrypt/live/home.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/home.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/home.hak8or.com/fullchain.pem;

        location / {
            root   /var/www/home.hak8or.com;
            index  index.html index.htm;
        }
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  portainer.hak8or.com www.portainer.hak8or.com;
        access_log   /var/log/nginx/portainer.access.log;

        ssl_certificate /etc/letsencrypt/live/portainer.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/portainer.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/portainer.hak8or.com/fullchain.pem;

        location / {
            proxy_pass http://192.168.1.2:9000;
        }
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  prox.hak8or.com www.prox.hak8or.com;
        access_log   /var/log/nginx/prox.access.log;

        ssl_certificate /etc/letsencrypt/live/prox.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/prox.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/prox.hak8or.com/fullchain.pem;

        location / {
            proxy_pass https://192.168.1.2:8006;

            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_read_timeout 86400;
        }
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  www.logging.hak8or.com logging.hak8or.com;
        access_log   /var/log/nginx/logging.access.log;

        ssl_certificate /etc/letsencrypt/live/logging.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/logging.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/logging.hak8or.com/fullchain.pem;

        location / {
            proxy_pass http://192.168.1.5:3000;
        }
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  www.gitea.hak8or.com gitea.hak8or.com;
        access_log   /var/log/nginx/gitea.access.log;

        ssl_certificate /etc/letsencrypt/live/gitea.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/gitea.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/gitea.hak8or.com/fullchain.pem;

        location / {
            proxy_pass http://192.168.1.6:3900;
        }
    }

    # server {
    #     listen       443 ssl http2;
    #     listen       [::]:443 ssl http2;
    #     server_name  www.dumbyt.hak8or.com dumbyt.hak8or.com;
    #     access_log   /var/log/nginx/dumbyt.access.log;

    #     ssl_certificate /etc/letsencrypt/live/dumbyt.hak8or.com/fullchain.pem;
    #     ssl_certificate_key /etc/letsencrypt/live/dumbyt.hak8or.com/privkey.pem;
    #     ssl_trusted_certificate /etc/letsencrypt/live/dumbyt.hak8or.com/fullchain.pem;

    #     location / {
    #         proxy_pass http://192.168.1.7:3000;
    #     }
    # }

    server {
        listen       443 ssl http2;
	listen       [::]:443 ssl http2;
        server_name  www.yarrr.hak8or.com yarrr.hak8or.com;
        access_log   /var/log/nginx/yarrr.access.log;
        
        ssl_certificate /etc/letsencrypt/live/yarrr.hak8or.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/yarrr.hak8or.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/yarrr.hak8or.com/fullchain.pem;

        location / {
            root   /var/www/yarrr.hak8or.com;
            index  index.html index.htm;
        }

        location /sab {
            proxy_pass http://192.168.1.3:8085;
        }

        location /shows {
            proxy_pass http://192.168.1.3:8989;
        }

        location /movies {
            proxy_pass http://192.168.1.3:7878;
        }
    }
}