server {
listen 80;
server_name www.site.ru site.ru;
rewrite ^ https://site.ru$request_uri? permanent; #301 redirect
}

server{
listen 443 ssl;

keepalive_timeout 60;
ssl on;
ssl_certificate bundled.crt;
ssl_certificate_key private.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!RC4:!aNULL:!MD5:!kEDH";
add_header Strict-Transport-Security 'max-age=604800';

server_name www.site.ru;
rewrite ^ https://site.ru$request_uri? permanent; #301 redirect
}


server{
listen 443 ssl;

keepalive_timeout 60;
ssl on;
ssl_certificate bundled.crt;
ssl_certificate_key private.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!RC4:!aNULL:!MD5:!kEDH";
add_header Strict-Transport-Security 'max-age=604800';
root /home/****/public;
server_name site-www.parts-soft.ru site.ru;
rewrite ^/(.*)/$ /$1 permanent;
client_max_body_size 50M;
charset off;

location ~ ^/(assets|images|system|ckeditor_assets)/ {
root /home/****/public;
expires 30d;
add_header Pragma public;
add_header Cache-Control public;
}

location / {
try_files $uri @puma;
}

location @puma {
proxy_read_timeout 18000;
proxy_set_header Client-Ip $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Host $host;
proxy_pass http://unix:/home/****/tmp/sockets/puma.sock;
}
}