server {
	listen        666 ssl;
	server_name   root-kit.ru;
	server_tokens off;
	http2 on;

	ssl_protocols TLSv1.2;
	ssl_certificate /usr/local/etc/letsencrypt/live/root-kit.ru/fullchain.pem;
	ssl_certificate_key /usr/local/etc/letsencrypt/live/root-kit.ru/privkey.pem;
	ssl_prefer_server_ciphers on;
	ssl_session_timeout 10m;


	location / {
		proxy_pass         http://127.0.0.1:8000;
		proxy_set_header   Host $host:$server_port;
		proxy_set_header   X-Real-IP $remote_addr;
		proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header   X-Forwarded-Host $server_name;
		proxy_set_header   X-Forwarded-Proto https;
		proxy_http_version 1.1;
		proxy_connect_timeout  36000s;
		proxy_read_timeout  36000s;
		proxy_send_timeout  36000s;
		send_timeout  36000s;

		# used for view/edit office file via Office Online Server
		client_max_body_size 0;

		access_log      /var/log/nginx/seahub.access.log;
		error_log       /var/log/nginx/seahub.error.log;
	}

	location /seafhttp {
		rewrite ^/seafhttp(.*)$ $1 break;
		proxy_pass http://127.0.0.1:8082;
		client_max_body_size 0;
		proxy_connect_timeout  36000s;
		proxy_read_timeout  36000s;
		proxy_send_timeout  36000s;
		send_timeout  36000s;
		proxy_request_buffering off;
		proxy_http_version 1.1;
		
	}

	location /seafmedia {
		rewrite ^/seafmedia(.*)$ /media$1 break;
		root /opt/seafile/seafile-server-latest/seahub;
	}

	location /seafdav {
		proxy_pass         http://127.0.0.1:8080;
		proxy_set_header   Host $host;
		proxy_set_header   X-Real-IP $remote_addr;
		proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header   X-Forwarded-Host $server_name;
		proxy_set_header   X-Forwarded-Proto https;
		proxy_http_version 1.1;
		proxy_connect_timeout  36000s;
		proxy_read_timeout  36000s;
		proxy_send_timeout  36000s;
		send_timeout  36000s;

		# This option is only available for Nginx >= 1.8.0.
		client_max_body_size 0;
		proxy_request_buffering off;

		access_log      /var/log/nginx/seafdav.access.log;
		error_log       /var/log/nginx/seafdav.error.log;
	}
}