server {
        server_name cloud.neller.org;
        add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload";
        location / {

                proxy_pass "http://127.0.0.1:50000/";
                proxy_set_header Host $http_host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Scheme $scheme;
                proxy_set_header X-Forwarded-Proto $scheme;


        }
	location /.well-known/carddav {
	    return 301 $scheme://$host/remote.php/dav;
	}
	location /.well-known/caldav {
	    return 301 $scheme://$host/remote.php/dav;
	}

	client_max_body_size 512M;
    	client_body_timeout 300s;
    	fastcgi_buffers 64 4K;
	gzip on;
	gzip_vary on;
	gzip_comp_level 4;
	gzip_min_length 256;
	gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
	gzip_types application/atom+xml text/javascript application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

	# The setting allows you to optimize the HTTP2 bandwidth.
    	# See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/
    	# for tuning hints
    	client_body_buffer_size 512k;

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/cloud.neller.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/cloud.neller.org/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = cloud.neller.org) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        server_name cloud.neller.org;
	listen 80;
	listen [::]:80;
    return 404; # managed by Certbot


}