worker_processes  2;

events {
    worker_connections  1024;
}

http {
    include     mime.types;
    default_type    application/octet-stream;
    sendfile        on;
    keepalive_timeout   65;

    gzip on;
    gzip_disable "msie6";

    server_names_hash_bucket_size 1024;

    proxy_connect_timeout      4s;
    proxy_send_timeout         4s;
    proxy_read_timeout         4s;

    proxy_buffer_size          4k;
    proxy_buffers              4 32k;
    proxy_busy_buffers_size    64k;
    proxy_temp_file_write_size 64k;

    server {
        listen      443 ssl;
        server_name  fearnlj01.co.uk www.fearnlj01.co.uk;

        ssl_certificate C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\fearnlj01.co.uk\\fullchain1.pem;
        ssl_certificate_key C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\fearnlj01.co.uk\\privkey1.pem;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

        add_header Strict-Transport-Security "max-age=31536000;" always;

        rewrite ^(/.*)\.html(\?.*)?$ $1$2 permanent;
        rewrite ^/(.*)/$ /$1 permanent;

        root    html;
        index   index.html;
        try_files $uri/index.html $uri.html $uri/ $uri =404;

        error_page  404             /index.html;
        error_page  500 502 503 504  /50x.html;
    }

#enforces hsts
    server {
        listen      80;
        server_name fearnlj01.co.uk www.fearnlj01.co.uk;
        return 301 https://$host$request_uri;
    }

#redirects radio subdomain to radio stream & https -> http
    server {
        listen  80;
        server_name radio.fearnlj01.co.uk;

        location / {
            proxy_pass http://localhost:8888/content/psc.mp3;
        }
    }
    server {
        listen  443 ssl;
        server_name radio.fearnlj01.co.uk;

        ssl_certificate C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\radio.fearnlj01.co.uk\\fullchain1.pem;
        ssl_certificate_key C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\radio.fearnlj01.co.uk\\privkey1.pem;

        return 301 http://$host$request_uri;
    }

#redirects radiocontrol subdomain to radio controler & https -> http
    server {
        listen  80;
        server_name radiocontrol.fearnlj01.co.uk;

        location / {
            proxy_pass http://localhost:4/;
        }
    }
    server {
        listen  443 ssl;
        server_name radiocontrol.fearnlj01.co.uk;

        ssl_certificate C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\radio.fearnlj01.co.uk\\fullchain1.pem;
        ssl_certificate_key C:\\Users\\fearnlj01\\AppData\\Local\\lxss\\rootfs\\etc\\letsencrypt\\archive\\radio.fearnlj01.co.uk\\privkey1.pem;

        return 301 http://$host$request_uri;
    }
}