services.conf

server {
    listen       443 ssl;
    server_name uwp.umputun.com;

    ssl_certificate        SSL_CERT;
    ssl_certificate_key    SSL_KEY;
    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";

    gzip on;
    gzip_disable "msie6";
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    access_log /dev/stdout;
    error_log /dev/stderr;

    root /var/www;

    # remove multiple sequences of forward slashes
    if ($request_uri ~ "^[^?]*?//") {
        rewrite "^" $scheme://$host$uri permanent;
    }

    location /media/ {
        error_page 404 = @archive;
        alias   /var/media/;
    }

    location /stats {
        alias   /var/stats/;
    }

    location @archive {
        rewrite ^/media(.*).mp3$ http://archive.rucast.net/uwp/media$1.mp3 redirect;
    }
}


server {
    listen       80;
    server_name podcast-failback.umputun.com;

    gzip on;
    gzip_disable "msie6";
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    root /var/www;

    access_log /dev/stdout;
    error_log /dev/stderr;

    location /media/ {
        error_page 404 = @archive;
        alias   /var/media/;
    }

    location /stats {
        alias   /var/stats/;
    }

    location @archive {
        rewrite ^/media(.*).mp3$ http://archive.rucast.net/uwp/media$1.mp3 redirect;
    }
}

server {
    listen 80;
    server_name rucast.com rucast.net;

    root  /var/www/rucast.net;

    access_log /dev/stdout;
    error_log /dev/stderr;

    location / {
        rewrite ^/download/tipz/(.*)$ http://archive.rucast.net/tipz/media/$1 redirect;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
}

server {
    listen 80;
    server_name feeds.rucast.com feeds.rucast.net;

    root  /var/www/rucast.net;

    access_log /dev/stdout;
    error_log /dev/stderr;

    location /Umputun {
        proxy_pass http://podcast-failback.umputun.com/podcast.rss;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
    location /umputun {
        proxy_pass http://podcast-failback.umputun.com/podcast.rss;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
}

server {
    listen 443 ssl;
    server_name feeds.rucast.com feeds.rucast.net;

    root  /var/www/rucast.net;

    access_log /dev/stdout;
    error_log /dev/stderr;

    location  /Umputun {
        proxy_pass http://podcast.umputun.com/podcast.rss;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
    location /umputun {
        proxy_pass http://podcast-failback.umputun.com/podcast.rss;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
}

server {
    listen      443 ssl;
    server_name remark42.umputun.com;
    root  /var/www/nginx/download/radio-t;

    ssl_certificate        SSL_CERT;
    ssl_certificate_key    SSL_KEY;

    gzip on;
    gzip_types text/plain application/json text/css application/javascript application/x-javascript text/javascript text/xml application/xml application/rss+xml application/atom+xml application/rdf+xml;
    gzip_min_length 1000;
    gzip_proxied any;

    access_log /dev/stdout;
    error_log /dev/stderr;

    location ~ /\.git {
        deny all;
    }

    location /index.html {
         proxy_redirect          off;
         proxy_set_header        X-Real-IP $remote_addr;
         proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header        Host $http_host;
         proxy_pass              http://remark42:8080/web/index.html;
     }

    location / {
         proxy_redirect          off;
         proxy_set_header        X-Real-IP $remote_addr;
         proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header        Host $http_host;
         proxy_pass              http://remark42:8080/;
    }
}

server {
    listen 443 ssl;
    server_name p.umputun.com;
    ssl_certificate        SSL_CERT;
    ssl_certificate_key    SSL_KEY;
    gzip on;
    gzip_types text/plain application/json text/css application/javascript application/x-javascript text/javascript text/xml application/xml application/rss+xml application/atom+xml application/rdf+xml;
    gzip_min_length 1000;
    
    root  /var/p.umputun.com;
    rewrite ^/p/(.*)$ https://p.umputun.com/$1 redirect;
    
    location /rss {
        proxy_pass https://p.umputun.com/index.xml;
        proxy_set_header  X-Real-IP  $remote_addr;
    }
    
    access_log /dev/stdout;
    error_log /dev/stderr;
}

server {
    listen 443 ssl http2;
    server_name tg-spam-uwp.umputun.com;
    ssl_certificate        SSL_CERT;
    ssl_certificate_key    SSL_KEY;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://tg-spam:8080/;
        proxy_redirect off;
    }
    access_log /dev/stdout;
    error_log /dev/stderr;
}