server {

        listen 80;
        server_name tokke.dk www.tokke.dk;
        return 301 https://$server_name$request_uri;  # enforce https
}

# HTTPS server

server {
	listen 127.0.0.1:10443;
	server_name tokke.dk www.tokke.dk;

	root /var/www/tokke.dk;
	index index.html index.htm;

	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
	ssl on;
        ssl_certificate /etc/nginx/ssl/ssl-chain-www-tokke.pem;
        ssl_certificate_key /etc/nginx/ssl/ssl-key-decrypted-www-tokke.key;
	ssl_prefer_server_ciphers On;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
	ssl_session_cache shared:SSL:20m;
	ssl_session_timeout 10m;
	add_header Strict-Transport-Security "max-age=31536000";


#	ssl_session_timeout 5m;

#	ssl_protocols SSLv3 TLSv1;
#	ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
#	ssl_prefer_server_ciphers on;
#
	location / {
		try_files $uri $uri/ =404;
	}

        location /rutorrent {
                # Satisfy any betyder at man kombinerer restriktionerne
                #       altså skal kun en af de to være opfyldt
                satisfy any;

                auth_basic            "Restricted Area";
                auth_basic_user_file  conf.d/.htpasswd;

                deny  all;

        }

	location /RPC2 {
        	include scgi_params;
        	scgi_pass localhost:5000;
        }
        location ~  \.php$ {
        	fastcgi_split_path_info ^(.+\.php)(.*)$;
        	fastcgi_pass   backend;
        	fastcgi_index  index.php;
        	fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        	include fastcgi_params;
        	fastcgi_param  QUERY_STRING     $query_string;
        	fastcgi_param  REQUEST_METHOD   $request_method;
        	fastcgi_param  CONTENT_TYPE     $content_type;
        	fastcgi_param  CONTENT_LENGTH   $content_length;
        	fastcgi_intercept_errors        on;
        	fastcgi_ignore_client_abort     off;
        	fastcgi_connect_timeout 60;
        	fastcgi_send_timeout 180;
        	fastcgi_read_timeout 180;
        	fastcgi_buffer_size 128k;
        	fastcgi_buffers 4 256k;
        	fastcgi_busy_buffers_size 256k;
        	fastcgi_temp_file_write_size 256k;
    	}
}

upstream backend {
        server unix:/var/run/php5-fpm.sock;
}