# Hanayo frontend
server {
    listen 80;
    listen [::]:80;
    server_name osu.ppy.sh www.osu.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name osu.ppy.sh www.osu.ppy.sh;

    #ssl on;
    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

location /d/  {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host pisstau.be;
        proxy_pass http://1.1.1.1/;
}

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:6969;
    }

    #rippleapi
    location /api {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded_for $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:40001;
    }

    #lets
    location ~ ^/(web|ss)/ {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5002;
    }

}

# Avatar server
server {
    listen 80;
    listen [::]:80;
    server_name a.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name a.ppy.sh;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5000;    # default port is 5000
    }
}

server {
	listen 80;
    listen 443 ssl;
    server_name i.ppy.sh;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    root /var/www/osu.ppy.sh/main_menu_icons;
    index index.html;
    location / {
        try_files $uri =404;
    }
}

# Servers
server {
    listen 80;
    listen [::]:80;
    server_name PRE-SETUP-SERVER-BY-AOBA-OSU-AINU.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name PRE-SETUP-SERVER-BY-AOBA-OSU-AINU.ppy.sh;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:1234;    # default port is 5000
    }
}

# Bancho server
upstream ruri {
    server unix:/tmp/ruri.sock fail_timeout=0;
  }

root /tmp;

    try_files $uri/index.html $uri @ruri;

    location @ruri {
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header Host $http_host;
       proxy_redirect off;
       proxy_pass http://ruri;
    }

server {
    listen 443 ssl;
    listen 80;
    server_name c.ppy.sh c1.ppy.sh c2.ppy.sh c3.ppy.sh c4.ppy.sh c5.ppy.sh c6.ppy.sh c7.ppy.sh c8.ppy.sh c9.ppy.sh ce.ppy.sh;

    ssl_certificate /root/ripple/nginx/cert.pem;
    ssl_certificate_key /root/ripple/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5001;
    }
}