server {
    listen 443 ssl;
    server_name REPLACE_fqdn_ECALPER;
    ssl_certificate /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/privkey.pem;
    root /var/www/html/;
    index index.html index.htm index.nginx-debian.html;

    # serve /var/repos/* for HTTPS git cloning
    location ~ /repos/clone(/.*) {
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend;
        # Commented out so only repos are served that contain a
        # git-daemon-export-ok file.
        # fastcgi_param GIT_HTTP_EXPORT_ALL "";
        fastcgi_param GIT_PROJECT_ROOT /var/repos;
        fastcgi_param PATH_INFO $1;
        fastcgi_pass unix:/var/run/fcgiwrap.socket;
    }

    # gitweb static files
    location /repos/static/ {
        alias /usr/share/gitweb/static/;
    }

    # gitweb; this needs packages fcgiwrap and gitweb
    location /repos/ {
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
        fastcgi_param GITWEB_CONFIG /etc/gitweb.conf;
        fastcgi_pass unix:/var/run/fcgiwrap.socket;
    }

    # login-protected IRC logs
    location ~ ^/irclogs/([^/]+)/ {
        auth_basic "$1 logs";
        auth_basic_user_file /var/www/irclogs_pw/$1;
        autoindex on;
    }

    location /guiltcards/ {
        include uwsgi_params;
        uwsgi_pass 127.0.0.1:9000;
    }
}