# system integration
user www-data;
worker_processes auto;
pid /run/nginx.pid;

# is expected even if empty
events {
}

http {
        # define content-type headers
        types {
            text/html                             html htm shtml;
            #text/css                              css;
            #text/xml                              xml;
            #text/plain                            txt sh rst md;
            #application/xhtml+xml                 xhtml;
            #application/pdf                       pdf;
            #image/jpeg                            jpg jpeg;
            #image/png                             png;
        }
        default_type application/octet_stream;
        charset utf-8;

        # logging deactivated due to DSGVO
	#access_log /var/log/nginx/access.log;
	#error_log /var/log/nginx/error.log;

        # HTTP server: only enforce HTTPS
        server {
                listen 80;
                return 301 https://$host$request_uri;
        }

	# HTTPS server
        server {
                listen 443 ssl;
                server_name REPLACE_fqdn_ECALPER;
                ssl_certificate /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/fullchain.pem;
                ssl_certificate_key /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/privkey.pem;
                root /var/www/html/;
		index index.html index.htm index.nginx-debian.html;
        }
}