map $remote_addr $log_ip {
     "~192.168..*" 0;
     default 1;
 }

server {
  listen 80;
  server_name _;
  return 444;
}

server {
  listen 443 ssl http2;
  server_name my-domain.de;
  ssl on;
  include /etc/nginx/snippets/strong-ssl.conf;
  ssl_certificate /etc/letsencrypt/live/my-domain.de/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/my-domain.de/privkey.pem;
  root /var/www/html;
  index index.html index.htm index.nginx-debian.html;
  error_page 401 403 404 /404.html;
  access_log /var/log/nginx/proxy.log main if=$log_ip;
  error_log /var/log/nginx/error.log;

  location / {
    try_files $uri $uri/ =404;
  }

  location ~ /\.ht {
          deny all;
  }

  location ~ /.well-known {
          allow all;
  }

  location /tinyrss/ {
    proxy_pass https://192.168.2.61/tinyrss/;
    include /etc/nginx/snippets/proxy.conf;
  }

  location /nextcloud/ {
    proxy_pass https://192.168.2.9/nextcloud/;
    include /etc/nginx/snippets/proxy.conf;
  }

  location /lychee/ {
    proxy_pass https://192.168.2.8/;
    include /etc/nginx/snippets/proxy.conf;
  }

  location /blog/ {
    proxy_pass https://192.168.2.12/blog/;
    include /etc/nginx/snippets/proxy.conf;
  }

  location /chevereto/ {
    proxy_pass https://192.168.2.16/chevereto/;
    include /etc/nginx/snippets/proxy.conf;
  }

  location /bookstack/ {
    proxy_pass https://192.168.2.14/;
    include /etc/nginx/snippets/proxy.conf;
  }

}

server {
  listen 80;
  server_name my-domain.de;
  return 301 https://my-domain.de$request_uri;
}

server {
  listen 80;
  server_name www.my-domain.de;
  return 301 https://my-domain.de$request_uri;
}

server {
  listen 80;
  server_name domain.homenet.org;
  return 301 https://my-domain.de$request_uri;
}

server {
  listen 80;
  server_name www.domain.homenet.org;
  return 301 https://my-domain.de$request_uri;
}

server {
  listen 443;
  server_name www.my-domain.de;
  return 301 $scheme://my-domain.de$request_uri;
}

server {
  listen 443;
  server_name www.domain.homenet.org;
  return 301 $scheme://my-domain.de$request_uri;
}

server {
  listen 80;
  server_name outlook.my-domain.de autodiscover.my-domain.de;
  return 301 https://$server_name$request_uri;
  error_log /var/log/nginx/exchange-error.log;
  access_log /var/log/nginx/exchange-access.log;
}

server {
  listen 443;
  server_name outlook.my-domain.de autodiscover.my-domain.de;
  ssl on;
  ssl_certificate /etc/letsencrypt/live/my-domain.de/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/my-domain.de/privkey.pem;
  ssl_session_timeout 360;
  proxy_buffer_size 64k;
  proxy_buffers 4 128k;
  proxy_busy_buffers_size 128k;
  proxy_read_timeout      360;
  proxy_http_version 1.1;
  proxy_pass_request_headers on;
  proxy_pass_header       Date;
  proxy_pass_header       Server;
  proxy_set_header        Host $host;
  proxy_set_header        X-Real-IP $remote_addr;
  proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header        Accept-Encoding "";
  more_set_input_headers 'Authorization: $http_authorization';
  proxy_set_header Accept-Encoding "";
  more_set_headers -s 401 'WWW-Authenticate: Basic realm="outlook.my-domain.de"';
  access_log /var/log/nginx/exchange-ssl-access.log;
  error_log /var/log/nginx/exchange-ssl-error.log;

  location /                            { return 301 https://outlook.my-domain.de/owa; }
  location /owa                         { proxy_pass https://outlook.my-domain.de/owa; }
  location /OWA                         { proxy_pass https://outlook.my-domain.de/OWA; }
  location /ecp                         { proxy_pass https://outlook.my-domain.de/ecp; }
  location /ECP                         { proxy_pass https://outlook.my-domain.de/ECP; }
  location /ews                         { proxy_pass https://outlook.my-domain.de/ews; }
  location /EWS                         { proxy_pass https://outlook.my-domain.de/EWS; }
  location /Microsoft-Server-ActiveSync { proxy_pass https://outlook.my-domain.de/Microsoft-Server-ActiveSync; }
  location /mapi                        { proxy_pass https://outlook.my-domain.de/mapi; }
  location /MAPI                        { proxy_pass https://outlook.my-domain.de/MAPI; }
  location /rpc                         { proxy_pass https://outlook.my-domain.de/rpc; }
  location /RPC                         { proxy_pass https://outlook.my-domain.de/RPC; }
  location /oab                         { proxy_pass https://outlook.my-domain.de/oab; }
  location /OAB                         { proxy_pass https://outlook.my-domain.de/OAB; }
  location /autodiscover                { proxy_pass https://outlook.my-domain.de/autodiscover; }
  location /Autodiscover                { proxy_pass https://outlook.my-domain.de/Autodiscover; }
}