---

user _nginx;
worker_processes auto;
pid /var/run/nginx.pid;

events {
    worker_connections 768;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    # Автоматический редирект с HTTP (порт 80) на HTTPS
    server {
        listen 80;
        server_name web.6aud67.ru;
        return 301 https://$host$request_uri;
    }

    # Безопасное HTTPS соединение (порт 443)
    server {
        listen 443 ssl;
        server_name web.6aud67.ru;

        root /usr/share/nginx/html;
        index index.html index.htm;

        ssl_certificate /cert/web.6aud67.ru.crt;
        ssl_certificate_key /cert/web.6aud67.ru.key;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;

        location / {
            try_files $uri $uri/ =404;
        }
    }
}