upstream organizr-https {
        server unix:/var/run/php-fpm/xxxx.socket;
}

server {
        listen 443 ssl http2;
        server_name xxxx;
    ssl_certificate /etc/letsencrypt/live/xxxx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/xxxx/privkey.pem; # managed by Certbot


        root /home/organizr/Organizr;
        index index.php;

        # set max upload size
        client_max_body_size 2G;
        fastcgi_buffers 64 4K;

        access_log /var/log/nginx/organizr_https_access.log combined;
        error_log /var/log/nginx/organizr_https_error.log;

        location = /robots.txt {
                allow all;
                log_not_found off;
                access_log off;
        }

    location / {
                try_files $uri $uri/ /index.php?$args ;
        }

    location ~ \.php(?:$|/) {
                fastcgi_split_path_info ^(.+\.php)(/.+)$;
                include fastcgi_params;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                fastcgi_param PATH_INFO $fastcgi_path_info;
                fastcgi_param HTTPS on;
                fastcgi_pass organizr-https;
                fastcgi_read_timeout 60s;
        }
}
# Every HTTP request will be forwarded to HTTPS by default
# Remove the block below to disable HTTP connections
server {
    listen 80;
    server_name xxxx;
    rewrite ^/(.*)$ https://$host:443/$1 redirect;
}