server {
	listen   443 ssl; ## listen for ipv4; this line is default and implied
 	# 	listen   [::]:80 default_server ipv6only=on; ## listen for ipv6

	server_name drupal.demo.taler.net;

	root /home/demo/drupal-demo;

	ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem;
	ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_dhparam /etc/ssl/certs/dhparam.pem;
	ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

	add_header Strict-Transport-Security "max-age=63072000; preload";

	# Make site accessible from http://localhost/

#	location / {
#            try_files $uri $uri/ =404;
#            rewrite /taler/pay /pay.php;
#            rewrite /taler/contract /generate_taler_contract.php;
#	}

#	location /fullfillment {
#            rewrite /(.*) /$1.php;	
#	}

	location ~ \.php$ {
		fastcgi_index index.php;
        	fastcgi_pass unix:/var/run/php5-fpm.sock;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include fastcgi_params;
        }

#      	location /backend {
#                rewrite /backend/(.*) /$1 break;
#	        proxy_pass http://127.0.0.1:19966;
#	        proxy_redirect off;
#	        proxy_set_header Host $host;
#	}

	client_max_body_size 10M;
	client_body_buffer_size 128k;

	include apps/drupal/drupal.conf;
}