server {
    listen 80;

    server_name trunk-wawa.abc.com;

    #301: The HTTP response status code 301 Moved Permanently
    return 301 https://trunk-wawa.abc.com$request_uri;
}

server {
        listen 443 ssl http2;
        server_name trunk-wawa.abc.com;

        ssl_certificate      /etc/nginx/ssl/bundle.cer;
        ssl_certificate_key  /etc/nginx/ssl/io.key;

        access_log /var/log/nginx/trunk-wawa.abc.com.log combined buffer=512k flush=5m;
        error_log /var/log/nginx/trunk-wawa.abc.com.error.log;

        error_page 403 /403.html;
        location = /403.html {
            allow all;
        }

        location ~ /(ivy/error) {
           deny all;
           return 403;
        }

        location ~ /(ivy/wf/) {
           deny all;
           return 403;
        }

        #location ^~ /ivy/info/ {
        #    deny all;
        #    return 403;
        #}

        rewrite ^/favicon.ico$ /var/www/favicon.ico break;

        location ~* /favicon(.*) {
            log_not_found off;
            access_log off;
            alias /var/www/favicon.ico;
        }

        location / {
			return 301 /ivy;
        }

        location /ivy/ {
            include /etc/nginx/wawa-reverse.conf;
            auth_basic           "Restricted area";
            auth_basic_user_file .htpasswd-wawa;
            if ($arg_pageId = admin_panel) {
                return                  401;
            }

        proxy_pass          http://100.133.1.30:8000/ivy/;
        }
    }