upstream django-backend {
    server 127.0.0.1:8080;
}

server {
        listen 80;
        listen [::]:80;
        location /.well-known/ {
            root /var/www/html;
            autoindex off;
        }
        rewrite ^/(.*) https://phantas.ma/$1 permanent;
}

server {
    server_tokens off;

    server_name  phantas.ma;
    listen   443 ssl http2;
    listen   [::]:443 ssl http2;

    ssl_trusted_certificate /etc/letsencrypt/live/phantas.ma/chain.pem;
    ssl_certificate /etc/letsencrypt/live/phantas.ma/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/phantas.ma/privkey.pem;
    #include /etc/letsencrypt/nginx.conf;

    location /favicon.ico {
        root   /srv/phantasma/www/static;
    }

    location /media/ {
        root   /srv/phantasma/data/;
    }
    location /static/ {
        root   /srv/phantasma/www/;
    }

    location / {
        root   /srv/phantasma/public;
        try_files $uri @proxy_to_app;
    }

    location @proxy_to_app {
        proxy_pass http://django-backend;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        proxy_redirect off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Host $server_name;
        client_max_body_size 32m;
    }

    error_page  400  /;
    error_page  404  /404.html;
    location  /404.html {
        root   /srv/phantasma/www/static/html;
    }

    # redirect server error pages to the static page /50x.html
    error_page   500 502 503 504  /50x.html;
    location  /50x.html {
        root   /srv/phantasma/www/static/html;
    }
}