worker_processes auto;

events {
    worker_connections 1024;
}

http {
    ssl_certificate ./ssl/fullchain.cer;
    ssl_certificate_key ./ssl/cert.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers EECDH+AESGCM:EDH+AESGCM:!aNULL:!eNULL:!MD5:!DSS:!EXP:!ADH:!LOW:!MEDIUM;
    resolver_timeout 5s;
    include mime.types;
    default_type application/octet-stream;
    sendfile on;
    keepalive_timeout 65;
    autoindex_localtime on;
    allow all;
    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
    }

    server {

        listen 80;
        server_name localhost;
        return 301 https://$host$request_uri;
    }

    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name threadfin.mka.net;
        location / {
            proxy_pass http://192.168.1.2:34400;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
    }


    #Root Domain
    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name_in_redirect off;
        server_name www.mka.net mka.net;
        log_not_found off;

        location / {
            root /inetpub/wwwroot;
            index index.html index.htm;
        }
    }

}