vhost.conf

ssl_certificate     /usr/local/etc/nginx/fosdem_org.crt;
ssl_certificate_key /usr/local/etc/nginx/fosdem_org.key;

# SSL protocol hacks.  Sigh.
# From https://weakdh.org/sysadmin.html.
ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:E
CDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-
SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAME
LLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_prefer_server_ciphers on;
ssl_dhparam /usr/local/etc/nginx/dhparams.pem;
ssl_session_cache shared:SSL:1m;

server {
	listen 31.22.22.137:80;
	listen [2001:67c:1808::7]:80;

	server_name ksp.fosdem.org;

	rewrite ^ https://$server_name$request_uri? permanent;
}

server {
	listen 31.22.22.137:443 ssl;
	listen [2001:67c:1808::7]:443 ssl;
	server_name ksp.fosdem.org;
	charset UTF-8;

	root /home/ksp/;

	location ~ /(2\d\d\d/)?(files|graphs|htdocs) {
		autoindex on;
	}

	location ~ /(2\d\d\d)?keys {
		autoindex on;
		# TODO: sort on date
	}

	rewrite ^/(2\d\d\d)/? https://$server_name/$1/files/ permanent;

	# While submissions are open
	#rewrite ^/$ https://$server_name/keys/ permanent;
	# After submission close
	rewrite ^/$ https://$server_name/files/ permanent;
}