################################################################################################################
#////////////////////////////////////////////////SERVER BLOCK\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\#
################################################################################################################

# REDIRECT TRAFFIC FROM www.[mysubdomain].duckdns.org TO https://[mysubdomain].duckdns.org
server {
listen 80;
listen 443 ssl http2;
server_name www.[mysubdomain].duckdns.org; #CHANGE THIS TO YOUR DOMAIN NAME!
return 301 https://[mysubdomain].duckdns.org$request_uri; #CHANGE THIS TO YOUR DOMAIN NAME!
}


################################################################################################################
#////////////////////////////////////////////////MAIN SERVER BLOCK\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\#
################################################################################################################

# MAIN SERVER BLOCK
server {
listen 443 ssl http2 default_server;
server_name [mysubdomain].duckdns.org; #CHANGE THIS TO YOUR DOMAIN NAME!

## Certificates from LE container placement
ssl_certificate /config/keys/letsencrypt/fullchain.pem;
ssl_certificate_key /config/keys/letsencrypt/privkey.pem;

## Strong Security recommended settings per cipherli.st
ssl_dhparam /config/nginx/dhparams.pem; # Bit value: 4096
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
ssl_session_timeout  10m;


#AUTHORIZATION BLOCK
location ~ /auth-(.*) {
 internal;
 proxy_pass http://192.168.1.146:8282/api/?v1/auth&group=$1;
 proxy_set_header Content-Length "";
}


################################################################################################################
#////////////////////////////////////////////////SUBDIRECTORIES\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\#
################################################################################################################


#RADARR CONTAINER
location /radarr {
auth_request /auth-0;
proxy_pass http://192.168.1.146:7878/radarr;
include /config/nginx/proxy.conf;
}

# RADARR ALLOW API FOR MOBILE APPS
#location /radarr/api {
#proxy_pass http://192.168.1.146:7878/radarr/api;
#include /config/nginx/proxy.conf;
#}

#SONARR CONTAINER
location /sonarr {
auth_request /auth-0;
proxy_pass http://192.168.1.146:8989/sonarr;
include /config/nginx/proxy.conf;
}

# SONARR ALLOW API FOR MOBILE APPS
#location /sonarr/api {
#auth_request /auth-0;
#proxy_pass http://192.168.1.146:8989/sonarr/api;
#include /config/nginx/proxy.conf;
#}

# DELUGE CONTAINER
location /deluge {
auth_request /auth-0;
proxy_pass http://192.168.1.146:8113/;
proxy_set_header X-Deluge-Base "/deluge/";
include /config/nginx/proxy.conf;
add_header X-Frame-Options SAMEORIGIN;
}

#NETDATA 301 REDIRECT
location /netdata {
return 301 /netdata/;
}

#NETDATA CONTAINER
location ~ /netdata/(?<ndpath>.*) {
auth_request /auth-4;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://192.168.1.146:19999/$ndpath$is_args$args;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection “keep-alive”;
proxy_store off;
}

#OMBI CONTAINER
location /ombi {
auth_request /auth-4;
proxy_pass http://192.168.1.146:3579/ombi;
include /config/nginx/proxy.conf;
}


# enable subdomain method reverse proxy confs
include /config/nginx/proxy-confs/*.subdomain.conf;
}