# Gaspar Marcos - ISPD Migration
server {
    listen 80;
    server_name rfmwtools-test.psi.ch;

    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name rfmwtools-test.psi.ch;

    root /opt/webcontent/rfmwtools;
    index rfmwtools.html;

    ssl_certificate     /etc/nginx/certs/rfmwtools-test.psi.ch.crt;
    ssl_certificate_key /etc/nginx/private/rfmwtools-test.psi.ch.key;

    access_log /var/log/nginx/rfmwtools-test.access.log;
    error_log  /var/log/nginx/rfmwtools-test.error.log;

    # CSP-only framing
    add_header Content-Security-Policy "frame-ancestors https://*.psi.ch" always;
    add_header X-Frame-Options "" always;

    location ~* \.(js|css|html|gif|png|jpg|ico)$ {
        autoindex off;
        try_files $uri =404;
    }

    location / {
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;

        try_files $uri/ =404;
    }
}