# Hanayo frontend
server {
    listen 80;
    listen [::]:80;
    server_name osu.ppy.sh www.osu.ppy.sh localhost;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name osu.ppy.sh www.osu.ppy.sh localhost;

    #ssl on;
    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location /d/  {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host cg.mxr.lol;
        proxy_redirect off;
        proxy_pass http://cg.mxr.lol/d/;
    }

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:6969;
    }

    #rippleapi
    location /api {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded_for $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:40001;
    }

    #lets
    location ~ ^/(web|ss)/ {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5002;
    }

}

# Avatar server
server {
    listen 80;
    listen [::]:80;
    server_name a.ppy.sh a.localhost;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name a.ppy.sh a.localhost;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5000;    # default port is 5000
    }
}

server {
	listen 80;
    listen 443 ssl;
    server_name i.ppy.sh i.localhost;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    root /var/www/osu.ppy.sh/main_menu_icons;
    index index.html;
    location / {
        try_files $uri =404;
    }
}

# Old frontend
server {
    listen 80;
    listen [::]:80;
    server_name old.ppy.sh old.localhost;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name old.ppy.sh old.localhost;

    root /var/www/osu.ppy.sh;
    index index.php index.html;

    #Certificate pathes
    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;

    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_protocols TLSv1.2;
    ssl_prefer_server_ciphers on;

    #Headers
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;" always;
    add_header X-Content-Type-Options nosniff;
    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Robots-Tag none;

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include /etc/nginx/fastcgi_params;
    }

	#lets
    location ~ ^/(web|ss|s|b|letsapi)/ {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5002;
    }

    location / {
        #autoindex on;
        index index.php;
        rewrite ^/(u|d)/[0-9]+$ /rewrite.php;
    }
}

# Bancho server
server {
    listen 443 ssl;
    listen 80;
    server_name c.ppy.sh c1.ppy.sh c2.ppy.sh c3.ppy.sh c4.ppy.sh c5.ppy.sh c6.ppy.sh c7.ppy.sh c8.ppy.sh c9.ppy.sh ce.ppy.sh c.localhost;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5001;
    }
}