cirandas.net-etc

## MAIN ADDRESS wwW REMOVAL
server {
  listen 80;
#  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.cirandas.net;
  rewrite ^ $scheme://cirandas.net$request_uri?;
}

## CUSTOM DOMAINS WWW REMOVAL
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.bhakta.cirandas.net;
  rewrite ^ $scheme://bhakta.cirandas.net$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.redemoinho.coop.br;
  rewrite ^ $scheme://redemoinho.coop.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.facesdobrasil.org.br;
  rewrite ^ $scheme://facesdobrasil.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.redeprosolidarios.org.br;
  rewrite ^ $scheme://redeprosolidarios.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.eita.org.br;
  rewrite ^ $scheme://eita.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.recantico.com.br;
  rewrite ^ $scheme://recantico.com.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.dialogoseconvergencias.org;
  rewrite ^ $scheme://dialogoseconvergencias.org$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.canore.coop.br;
  rewrite ^ $scheme://canore.coop.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.unicafes.org.br;
  rewrite ^ $scheme://unicafes.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.artgravata.com.br;
  rewrite ^ $scheme://artgravata.com.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.terramirim.org.br;
  rewrite ^ $scheme://terramirim.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.amabor.org.br;
  rewrite ^ $scheme://amabor.org.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.serdosertao.coop.br;
  rewrite ^ $scheme://serdosertao.coop.br$request_uri?;
}
server {
  listen 80;
  listen 443 ssl;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  server_name www.feiradamatacafat.com.br;
  rewrite ^ $scheme://feiradamatacafat.com.br$request_uri?;
}

## REDIRECTS

upstream cirandas {
  server unix:/home/cirandas/run/unicorn.sock;

  keepalive 64;
}



server {
  listen 80;
  listen 443 ssl default_server;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_certificate /etc/ssl/certs/cirandas-net.chained.crt;
  ssl_certificate_key /etc/ssl/private/cirandas-net.key;

  server_name bhakta.cirandas.net cirandas.net bhakta.cirandas.net redemoinho.coop.br facesdobrasil.org.br redeprosolidarios.org.br eita.org.br recantico.com.br dialogoseconvergencias.org canore.coop.br unicafes.org.br artgravata.com.br terramirim.org.br amabor.org.br serdosertao.coop.br feiradamatacafat.com.br;
  port_in_redirect off;
  root /home/cirandas/noosfero-ecosol/public;


  if (-f $document_root/maintenance.html) {
    return 503;
  }
  error_page 503 @maintenance;
  location @maintenance {
    rewrite ^(.*)$ /maintenance.html break;
  }

  access_log /home/cirandas/log/access.log combined;
  error_log /home/cirandas/log/error.log;

  location ~ '.+\.php$' {
    return 404;
  }

  location ~ '/assets/.+-[^\.]{64}\..+$' {
    add_header Cache-Control public;
    expires 1y;
    try_files $uri @proxy;
  }

  location / {
    if ($http_user_agent = "") {
      return 444;
    }
    if ($http_user_agent = "-") {
      return 444;
    }

    if ($http_user_agent ~ (SemrushBot|msnbot|Purebot|Baiduspider|Lipperhey|Mail.Ru|scrapbot|MJ12bot|AhrefsBot|YandexBot|BDCbot|MegaIndex|UniLeipzigASV|DotBot|Typhoeus|Bingbot|bingbot|Yandex|Knowledge|PetalBot) ) {
      access_log off;
      return 444;
    }

    try_files index.html $uri @proxy;
  }

  location @proxy {
    proxy_buffers               4 256k;
    proxy_buffer_size           256k;
    proxy_busy_buffers_size     256k;
    proxy_temp_file_write_size  256k;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Host $host;
    proxy_pass http://cirandas;

  }
}