server {
        listen 443 default ssl;
        server_name mail.wireless.home.huldtgren.net;
        root /var/www/htdocs_ssl;
        index index.html index.php;

        client_max_body_size    20M;

        ssl_certificate         /etc/ssl/nginx_httpd.crt;
        ssl_certificate_key     /etc/ssl/private/nginx_httpd.key;

        ssl_session_timeout     5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

        location ^~ /(config\/|lib\/|locale\/|po\/|scripts\/|templates\/|kronolith\/feed\/) {
                deny all;
        }

        location /horde/rpc {
                try_files $uri $uri/ @rpc;
        }

        location ~ \.php$ {
                include fastcgi_params;
                fastcgi_index  index.php;
                fastcgi_param HTTPS on;
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_send_timeout 1800;
                fastcgi_read_timeout 1800;
                fastcgi_connect_timeout 1800;
                fastcgi_param SSL_PROTOCOL          $ssl_protocol;
                fastcgi_param SSL_CIPHER            $ssl_cipher;
                fastcgi_param SSL_SESSION_ID        $ssl_session_id;
                fastcgi_param SSL_CLIENT_VERIFY     $ssl_client_verify;
        }

        location @rpc {
                fastcgi_split_path_info ^(.+\.php)(/.+)$;
                include fastcgi_params;
                fastcgi_param HTTPS on;
                fastcgi_index  index.php;
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_send_timeout 1800;
                fastcgi_read_timeout 1800;
                fastcgi_connect_timeout 1800;
        }

        access_log  /var/www/logs/huldtgren/mail.huldtgren.com-access.log combined;
        error_log  /var/www/logs/huldtgren/mail.huldtgren.com-error.log debug;

        location ~* ^.+.(jpe?g|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js|swf|avi|mp3)$ {
                expires 30d;
        }
}

# cat /etc/nginx/fastcgi_params
fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;

fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;

fastcgi_param  PATH_INFO          $fastcgi_path_info;
fastcgi_param  PATH_TRANSLATED    $document_root$fastcgi_path_info;

fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;

fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;