ssl setup

upstream gunicorn {
    server 127.0.0.1:8000;
}

# define an nginx server at port 80
server {
    # listen on port 80
    listen 80;
    listen   [::]:80 ipv6only=on;
    rewrite ^(.*)$ https://www.evehub.org$1;


    # keep logs in these files
    access_log /var/log/nginx/evehub_access.log;
    error_log /var/log/nginx/evehub_error.log;
}

server {
    listen   443;
    listen   [::]:443 ipv6only=on;
    server_name  evehub.org;

    ssl on;
    ssl_certificate /etc/nginx/ssl/evehub.org.crt;
    ssl_certificate_key /etc/nginx/ssl/evehub.org.key;

    access_log  /var/log/nginx/evehub.access.log;

    # Force my fav domain name???
    if ($http_host !~ www.evehub.org) {
        rewrite ^(.*)$ http://www.evehub.org$1;
        break;
    }

    client_max_body_size 0;

    # define rules for gunicorn
    location /{
        client_max_body_size 0;
        proxy_pass http://gunicorn;
        proxy_redirect off;
        proxy_read_timeout 5m;

        # make sure these HTTP headers are set properly
        proxy_set_header Host            $host;
        proxy_set_header X-Real-IP       $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /static {
        alias /home/sult/evehub/static_collected/;
    }

    location /media {
        alias /home/sult/evehub/media/;
    }
}