server {
	listen 80;

	server_name turtles.devel.kazuto.de;

	# enforce https
	return 301 https://$host$request_uri;
}

server {
	listen 443 ssl;

	server_name turtles.devel.kazuto.de;

	root /var/www/kazuto.de/devel/htdocs/turtles/public;

	ssl_certificate /etc/letsencrypt/live/kazuto.de/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/kazuto.de/privkey.pem;

	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';


	index index.php index.html index.htm;


	location / {
		try_files $uri $uri/ =404;
		#autoindex on;
	}

	location ~ \.php$ {
		include snippets/fastcgi-php.conf;
		fastcgi_pass unix:/run/php/php7.0-fpm.sock;
	}

	location ~ /\.ht {
        deny all;
    }
}