deployment-web/roles/deploy-web/files/gouter

server {
	access_log /var/log/nginx/clarissa_access.log main;
	error_log /var/log/nginx/clarissa_error.log;
	#gzip_static off;
	server_name clarissariviere.com clarissariviere.fr www.clarissariviere.fr www.clarissariviere.com;
        add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
	add_header Link "<https://www.clarissariviere.com;> rel=\"canonical\", <https://www.clarissariviere.fr;> rel=\"alternate\" hreflang=\"fr\"";
	proxy_cache STATIC;	
	location / {
		# First attempt to serve request as file, then
		# as directory, then fall back to displaying a 404.
		#try_files $uri $uri/ =404;
	        proxy_set_header Accept-Encoding "";
		proxy_pass http://gouters.canalblog.com/;
                #add_header Link "<https://www.clarissariviere.com; rel=\"canonical\">";
		#proxy_redirect off;
                #proxy_set_header Host $host;
		#proxy_buffering        on;
                #proxy_cache            STATIC;
                proxy_cache_key $scheme://$host$uri$is_args$query_string;
		proxy_cache_valid      200  10m;
                proxy_cache_lock on;
		proxy_cache_use_stale  error timeout invalid_header updating http_500 http_502 http_503 http_504;
		proxy_ignore_headers	X-Accel-Expires Expires Cache-Control;
		#proxy_ssl_verify off;
		#proxy_set_header X-Real-IP $remote_addr;
                #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		#proxy_set_header X-Forwarded-Proto $scheme;
		sub_filter 'gouters.canalblog.com' "$host";
		sub_filter '<meta name="generator" content="CanalBlog - https://www.canalblog.com" />' '';
		sub_filter_types text/html text/xml text/plain text/css;
		sub_filter_once off;	
	

	}
	location /googlebbc3cfa6d1866691.html {
		root /var/www/gouter/;
	}

	location /yandex_93259fe4480c9828.html {
		root /var/www/gouter/;
	}

	location /yandex_f07f7ace7d8459d8.html {
		root /var/www/gouter/;
	}
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/clarissariviere.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/clarissariviere.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot




}

server {
    if ($host = www.clarissariviere.fr) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = www.clarissariviere.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = clarissariviere.fr) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = clarissariviere.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


	server_name clarissariviere.com clarissariviere.fr www.clarissariviere.fr www.clarissariviere.com;

     listen 80;
    return 404; # managed by Certbot
}