server {
  server_name
        api.psmf.hrajfrisbee.cz
        ;
  location / {
          proxy_set_header        Host            $host;
          proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header        X-Forwarded-Proto $scheme;
    proxy_pass http://192.168.123.21:5001;
  }

    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 8443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/api.psmf.hrajfrisbee.cz/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/api.psmf.hrajfrisbee.cz/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = api.psmf.hrajfrisbee.cz) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


  listen 80;
  server_name api.psmf.hrajfrisbee.cz;
    return 404; # managed by Certbot
}

# ----------------
# api-sync.psmf.hrajfrisbee.cz
server {
  client_max_body_size 15m;                                                                                                                                                              proxy_read_timeout 600;
  server_name
        api-sync.psmf.hrajfrisbee.cz
        ;
  location / {
    proxy_pass http://192.168.123.21:8003;
  }

    listen 8443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/api-sync.psmf.hrajfrisbee.cz/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/api-sync.psmf.hrajfrisbee.cz/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

# ----------------
# gitlab & friends
# ----------------

server {

        server_name
                gitlab.hrajfrisbee.cz
        ;

        # let certbot http-01 land
        location /.well-known/acme-challenge/ { root /var/www/html; }


          location / {
            proxy_pass http://192.168.123.21:80;
            proxy_set_header        X-Real-IP       $remote_addr;
            proxy_set_header        Host            $host;
            proxy_redirect          off;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_connect_timeout 90;
            proxy_send_timeout 90;
            proxy_read_timeout 90;
            client_max_body_size 10m;
            client_body_buffer_size 128k;
            proxy_buffer_size 4k;
            proxy_buffers 4 32k;
            proxy_busy_buffers_size 64k;

          }

    listen 8443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/gitlab.hrajfrisbee.cz/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/gitlab.hrajfrisbee.cz/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    } # managed by Certbot

}

server {
        server_name
                registry.gitlab.hrajfrisbee.cz
        ;

        location / {
                proxy_pass       http://192.168.123.21:5005;
                proxy_set_header Host            $host;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header X-Forwarded-Proto https;
                proxy_set_header X-Forwarded-Ssl on;

                client_max_body_size 3000M;
                client_body_buffer_size 200000k;
            #auth_basic "Restricted Content";
            #auth_basic_user_file /etc/nginx/.htpasswd;
          }


    listen 8443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/registry.gitlab.hrajfrisbee.cz/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/registry.gitlab.hrajfrisbee.cz/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    } # managed by Certbot
}


server {
    if ($host = api-sync.psmf.hrajfrisbee.cz) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


  listen 80;
  server_name
        api-sync.psmf.hrajfrisbee.cz
        ;
    return 404; # managed by Certbot


}


server {
    if ($host = registry.gitlab.hrajfrisbee.cz) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        server_name
                registry.gitlab.hrajfrisbee.cz
        ;
    listen 80;
    return 404; # managed by Certbot
}


server {
    if ($host = gitlab.hrajfrisbee.cz) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        server_name
                gitlab.hrajfrisbee.cz
        ;
    listen 80;
    return 404; # managed by Certbot
}

# ----------------
# legacy sites
# ----------------

server {
        server_name
                vegtral.cz www.vegtral.cz
        ;

        location / {
                proxy_pass       http://192.168.123.21:8080;
                proxy_set_header Host            $host;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header X-Forwarded-Proto https;
                proxy_set_header X-Forwarded-Ssl on;

                client_max_body_size 3000M;
                client_body_buffer_size 200000k;
          }
}