server {
    listen 443 ssl;
    server_name REPLACE_fqdn_ECALPER;
    ssl_certificate /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/REPLACE_fqdn_ECALPER/privkey.pem;
    root /var/www-dump/;

    location /dump/ {
        autoindex on;
    }

    location /geheim/ {
        auth_basic "geheim geheim";
        auth_basic_user_file /var/www-dump/password_geheim;
        autoindex on;
    }

    location /zettel/ {
        # rewrite non-suffixed filenames to .html ones
        rewrite ^(/zettel/(.*/)*[^./]+)$ $1.html;
        autoindex on;
    }

    location /uwsgi/ {
        include uwsgi_params;
        uwsgi_pass 127.0.0.1:3031;
    }
}