server {
	listen 443 ssl spdy;
	listen [::]:443 ssl spdy;

	server_name media.melted.pw;

	root /nope/dot/jpg;
	index index.php index.html;

	ssl on;
	ssl_certificate /etc/ssl/melted.pw/melted.pw.crt;
	ssl_certificate_key /etc/ssl/melted.pw/melted.pw.key;

        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_trusted_certificate /etc/ssl/melted.pw/full_chain.pem;
        resolver 8.8.8.8 8.8.4.4 valid=300s;
        resolver_timeout 5s;

        add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
        add_header X-Frame-Options "DENY";
        add_header X-Content-Type-Options nosniff;

        location / {
                proxy_pass https://localhost:/nope/dot/jpg;
                include proxy_params;
        }

	location /rutorrent {
		try_files $uri $uri/ index.html;
		auth_basic "Restricted";
		auth_basic_user_file /nope/dot/jpg;
	}

	location /sonarr {
		proxy_pass http://localhost:/nope/dot/jpg;
                include proxy_params;
	}

	location /couchpotato {
		proxy_pass https://localhost:/nope/dot/jpg;
                include proxy_params;
	}

	location /RPC2 {
		include scgi_params;
		scgi_pass localhost:/nope/dot/jpg;
	}

	location = /favicon.ico {
		log_not_found off;
		access_log off;
	}

	location = /robots.txt {
		allow all;
		log_not_found off;
		access_log off;
	}

	location ~ \.php$ {
		include fastcgi_params;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/var/run/php5-fpm.sock;
		fastcgi_index index.php;
		fastcgi_param HTTPS on;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_read_timeout 630;
		fastcgi_keep_conn on;
	}
}