server {
		## redirection url ##
        listen 80;
        server_name mydomaine.com www.mydomaine.com;

        ## redirection permanant HTTP: vers HTTPS: ##
        rewrite ^ https://$server_name$request_uri? permanent;

        ## inclure pages erreurs ##
    	# include /etc/nginx/conf.d/error_pages.conf;
}

server {
	listen 443 default_server ssl http2;
	server_name mydomaine.com www.mydomaine.com;

	index index.html index.php;
	charset utf-8;
	client_max_body_size 10M;

	## Début ##

	ssl on;
	ssl_certificate /etc/ssl/nginx/mydomaine.com.crt-unified;
	ssl_certificate_key /etc/ssl/nginx/server.key;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers "EECDH+AESGCM:AES128+EECDH:AES256+EECDH";

	ssl_prefer_server_ciphers on;
	ssl_ecdh_curve secp384r1;

	ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 10m;

	ssl_stapling        on;
	ssl_stapling_verify on;

	resolver 8.8.4.4 8.8.8.8 valid=300s;
	resolver_timeout 10s;

	add_header X-Frame-Options "SAMEORIGIN";
	add_header X-Content-Type-Options "nosniff";

	## Fin ##

	## inclure pages erreurs ##
    include /etc/nginx/conf.d/error_pages.conf;

	# On a neutralisés les lignes SSL et l'include ci-dessous car ajourt script ci-dessus

	## ssl_certificate /etc/nginx/ssl/server.crt; ##
	## ssl_certificate_key /etc/nginx/ssl/server.key; ##

	# include /etc/nginx/conf.d/ciphers.conf; ##

	access_log /var/log/nginx/rutorrent-access.log combined;
	error_log /var/log/nginx/rutorrent-error.log error;

	# error_page 500 502 503 504 /50x.html;
	# location = /50x.html { root /usr/share/nginx/html; }

	# auth_basic "seedbox";
	auth_basic "mydomaine";
	auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd";

	location = /favicon.ico {
		access_log off;
		log_not_found off;
	}

	## début config accueil serveur ##

	location ^~ / {
	    root /var/www/base;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;
	    satisfy any;
	    allow all;
	}

	## fin config accueil serveur ##

	## début config proxy ##

	location ^~ /proxy {
	    root /var/www;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;
	}

	## fin config proxy ##

	## début config rutorrent ##

	location ^~ /rutorrent {
	    root /var/www;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;

	    location ~ /\.svn {
		    deny all;
	    }

	    location ~ /\.ht {
		    deny all;
	    }
	}

	location ^~ /rutorrent/conf/ {
		deny all;
	}

	location ^~ /rutorrent/share/ {
		deny all;
	}

	## fin config rutorrent ##

	## début config munin ##

	location ^~ /graph {
	    root /var/www;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;
	}

	location ^~ /graph/img {
	    root /var/www;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;
	    error_log /dev/null crit;
	}

	location ^~ /monitoring {
	    root /var/www;
	    include /etc/nginx/conf.d/php.conf;
	    include /etc/nginx/conf.d/cache.conf;
	}

	## fin config munin ##

	## début config seedbox-manager ##

	location ^~ /seedbox-manager {
	alias /var/www/seedbox-manager/public;
	    include /etc/nginx/conf.d/php-manager.conf;
	    include /etc/nginx/conf.d/cache.conf;
	}

        ## fin config seedbox-manager ##

        ## config utilisateurs  ##

        location /USER1 {
            include scgi_params;
            scgi_pass 127.0.0.1:5001; #ou socket : unix:/home/username/.session/username.socket
            # auth_basic "seedbox";
            auth_basic "mydomaine";
            auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd_user1";
        }

        location /USER2 {
            include scgi_params;
            scgi_pass 127.0.0.1:5003; #ou socket : unix:/home/username/.session/username.socket
            # auth_basic "seedbox";
            auth_basic "mydomaine";
            auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd_user2";
        }
}