# www to non-www redirect -- duplicate content is BAD:
# https://github.com/h5bp/html5-boilerplate/blob/5370479476dceae7cc3ea105946536d6bc0ee468/.htaccess#L362
# Choose between www and non-www, listen on the *wrong* one and redirect to
# the right one -- http://wiki.nginx.org/Pitfalls#Server_Name

server {
    # don't forget to tell on which port this server listens
    listen [::]:80;
    listen 80;

    # listen on the www host
    server_name www.staroobrad.xyz;

    # and redirect to the non-www host (declared below)
    return 301 $scheme://staroobrad.xyz$request_uri;
}

server {
    # listen [::]:80 accept_filter=httpready; # for FreeBSD
    # listen 80 accept_filter=httpready; # for FreeBSD
    # listen [::]:80 deferred; # for Linux
    # listen 80 deferred; # for Linux
    listen [::]:80;
    listen 80;

    # The host name to respond to
    server_name staroobrad.xyz;

    location / {
        # root /var/www/staroobrad.xyz/public;
        index index.html index.php;
    }

    location /.well-known/acme-challenge/ {
        alias /var/www/.well-known/acme-challenge/;
    }

    location ~ [^/]\.php(/|$) {
        fastcgi_split_path_info ^(.+?\.php)(/.*)$;
        if (!-f $document_root$fastcgi_script_name) {
            return 404;
        }

        # Mitigate https://httpoxy.org/ vulnerabilities
        fastcgi_param HTTP_PROXY "";

        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi_params;
    }

    # Path for static files
    root /var/www/staroobrad.xyz/public;

    # Specify a charset
    charset utf-8;

    # Custom 404 page
    error_page 404 /var/www/staroobrad.xyz/errors/404.html;

    # Include the basic h5bp config set
    include h5bp/basic.conf;
}