#user  nobody;
worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;

    server {
        listen 80;
        server_name ~^(.+)$;
    	location ^~ /.well-known/acme-challenge/ {
        	default_type "text/plain";
	        root /nginx/www/organizr/html;
    	}
        location / {
		return 301 https://$host$request_uri;
	}
    }
    server {
        listen       443;
	#CHANGE THESE LINES##########
        server_name  example.com localhost;
	ssl on;
	ssl_certificate C:\ProgramData\win-acme\httpsacme-v01.api.letsencrypt.org\example.com-chain.pem;
	ssl_certificate_key C:\ProgramData\win-acme\httpsacme-v01.api.letsencrypt.org\example.com-key.pem;
	ssl_trusted_certificate C:\ProgramData\win-acme\httpsacme-v01.api.letsencrypt.org\example.com-crt.pem;
	include /nginx/conf/ssl.conf; #SSL_CONF
        root  /nginx/www/organizr/html;
        #############################
        index index.php index.html index.htm;
	error_page 400 401 403 404 405 408 500 502 503 504  /error.php?error=$status;
        location ~ \.php$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }
		location ~ /auth-(.*) {
		internal;
		rewrite ^/auth-(.*) /api/?v1/auth&group=$1;
		}

		location /radarr {

            auth_request /auth-0;
            proxy_pass http://127.0.0.1:7878/radarr;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_http_version 1.1;
			proxy_no_cache $cookie_session;
			# Allow the Radarr API through if you enable Auth on the block above
			location /radarr/api { auth_request off;
                proxy_pass http://127.0.0.1:7878/radarr/api;

        }

        }

		location /plex {

			auth_request /auth-0;
			proxy_pass http://127.0.0.1:32400/;
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			# Websockets
			proxy_http_version 1.1;
			proxy_set_header Upgrade $http_upgrade;
			proxy_set_header Connection "upgrade";
		}

    }
}