server {
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name xxx.ddns.net;
	ssl_certificate /etc/letsencrypt/live/xxx.ddns.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/xxx.ddns.net/privkey.pem;

   location / {
	proxy_set_header X-Forwarded-Ssl on;
	}

   location /ombi/ {
     	proxy_pass http://192.168.0.12:5000;
 	proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Host $server_name;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        #proxy_set_header X-Forwarded-Ssl on;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout  90;
	}
   location /jackett/ {
	proxy_pass http://192.168.0.4:9117;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}
   location /radarr {
    	proxy_pass http://192.168.0.7:7878;
        }
   location /rutorrent {
	proxy_pass http://192.168.0.5/rutorrent;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}
   location ~ \.php$ {
#        fastcgi_index index.php;
#        include /etc/nginx/fastcgi_params;
#        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
#        fastcgi_pass unix:/run/php/php5-fpm.sock;
  try_files $uri =404;
  fastcgi_pass unix:/run/php/php7.0-fpm.sock;
  fastcgi_index index.php;
  fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  include fastcgi_params;
  fastcgi_intercept_errors on;
  fastcgi_ignore_client_abort off;
  fastcgi_connect_timeout 60;
  fastcgi_send_timeout 180;
  fastcgi_read_timeout 180;
  fastcgi_buffers 4 256k;
  fastcgi_buffer_size 128k;
  fastcgi_busy_buffers_size 256k;
  fastcgi_temp_file_write_size 256k;
	}
    location /RPC2 {
        scgi_pass 192.168.0.5:5001;
        include scgi_params;
        scgi_param SCRIPT_NAME /RPC2;
	}
   location ^~ /medusa {
	proxy_pass https://192.168.0.9:8081;
#	auth_basic "Restricted";
#	proxy_set_header X-Forwarded-Ssl on;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#	proxy_set_header X-Forwarded-Host $host:80;
	proxy_set_header X-Forwarded-Host $host:443;
	proxy_set_header X-Forwarded-Server $host;
	#proxy_set_header X-Forwarded-Port 80;
	proxy_set_header X-Forwarded-Port 443;
	proxy_set_header X-Forwarded-Proto $scheme;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_read_timeout 86400;
	}
   location /organizr {
	proxy_pass http://192.168.0.26/organizr;
	}
   location /plexpy {
	proxy_pass http://192.168.0.18:8181;
	}
   location /nextcloud {
	proxy_pass http://192.168.0.6/nextcloud;
	}
}

 server {
   listen 80;
   listen [::]:80;
   server_name xxx.ddns.net;
 #  return 301 https://$host$request_uri;
   return 301 https://$server_name$request_uri;
   proxy_buffering off;
   add_header X-Frame-Options SAMEORIGIN;
   add_header X-Content-Type-Options nosniff;
   add_header X-XSS-Protection "1; mode=block";
   add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
   add_header Referrer-Policy strict-origin;
   real_ip_header X-Forwarded-For;

   location /ombi/ {
     	proxy_pass http://192.168.0.12:5000;
 	proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Host $server_name;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   #     proxy_set_header X-Forwarded-Ssl on;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout  90;
	}
   location /jackett/ {
	proxy_pass http://192.168.0.4:9117;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}
   location /radarr {
    	proxy_pass http://192.168.0.7:7878;
        }
   location /rutorrent {
	proxy_pass http://192.168.0.5/rutorrent;
	#include scgi_params;
	#scgi_pass 192.168.0.5:5001;
	}
   location /medusa {
	proxy_pass http://192.168.0.9:8081;
	auth_basic "Restricted";
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header X-Forwarded-Host $host:80;
	proxy_set_header X-Forwarded-Server $host;
	proxy_set_header X-Forwarded-Port 80;
	proxy_set_header X-Forwarded-Proto $scheme;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_read_timeout 86400;
	}
   location /organizr {
	proxy_pass http://192.168.0.26/organizr;
	}
   location /plexpy {
	proxy_pass http://192.168.0.18:8181;
	}
   location /nextcloud {
	proxy_pass http://192.168.0.6/nextcloud;
	}
}