upstream php-handler {
    server unix:/var/run/php/php{{ fpm_version }}-fpm.sock;
}

server {
    listen 80;
    listen [::]:80;
    server_name malabaricus.trygvis.io;
    # enforce https
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name malabaricus.trygvis.io;

    ssl_certificate /etc/letsencrypt/live/malabaricus.trygvis.io/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/malabaricus.trygvis.io/privkey.pem;

    include snippets/nextcloud.conf;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name malabaricus.vpn.trygvis.io;

    ssl_certificate /etc/letsencrypt/live/malabaricus.vpn.trygvis.io/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/malabaricus.vpn.trygvis.io/privkey.pem;

    include snippets/nextcloud.conf;
}