server  {
        listen  80;
        ## Redirect to https ##
        return  301 https://$host$request_uri;
        }

server  {
        listen  443 ssl;
        ssl     on;

        auth_basic "Auth";
        auth_basic_user_file /etc/nginx/.htpasswd;

        ## SSL logging ##
        access_log      /var/log/nginx/ssl-access.log;
        error_log       /var/log/nginx/ssl-error.log;

        ## SSL certificates ###
        ssl_certificate      ssl/server.crt;
        ssl_certificate_key  ssl/server.key;

        ### SSL specific settings, removed SSLv3 ###
        ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers RC4:HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;
        keepalive_timeout    60;
        ssl_session_cache    shared:SSL:10m;
        ssl_session_timeout  10m;

        root    /usr/share/nginx/www;
        index   index.html;

        ### force timeouts if  backend has died ###
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

	### Set headers ####
        proxy_headers_hash_max_size 51200;
        proxy_headers_hash_bucket_size 6400;
        proxy_set_header        Accept-Encoding   "";
        proxy_set_header        Host            $host;
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        add_header              Front-End-Https   on;

        location / {
        ### look up what this does ###
            proxy_redirect     off;
        }
        location /nzbdrone {
                proxy_pass http://10.0.1.2:8989;
        }
        location /sabnzbd {
                proxy_pass http://10.0.1.2:8080;
        }
        location /couchpotato {
                proxy_pass http://10.0.1.2:5050;
        }
}