upstream python_sarafai_ru {
    server unix:/srv/projects/env3/run/gunicorn.sock fail_timeout=0;
    # server 127.0.0.1:9000 fail_timeout=0;
}

server {
    if ($host = www.sarafai.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = lk.sarafai.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = sarafai.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


#    if ($host = www.sarafai.ru) {
#        return 301 https://$host$request_uri;
#    } # managed by Certbot

#    if ($host = sarafai.ru) {
#        return 301 https://$host$request_uri;
#    } # managed by Certbot

    listen [::]:80;
    listen 80;

    server_name sarafai.ru www.sarafai.ru lk.sarafai.ru;
#    return 404; # managed by Certbot

    root /srv/projects/env3/src;

    location = /favicon.ico {
        log_not_found off;
        access_log off;
        alias /srv/projects/env3/src/static/favicons/favicon.ico;
    }

    # error_log /var/log/nginx/sarafai.ru_error.log;
    # access_log /var/log/nginx/sarafai.ru_access.log;
    error_log /srv/projects/env3/logs/nginx/sarafai.ru_error.log;
    access_log /srv/projects/env3/logs/nginx/sarafai.ru_access.log;







}

server {
    #listen [::]:443 ssl http2;
    #listen 443 quic reuseport;
    listen [::]:443 ssl;
    listen 443 ssl;

    http2 on;

    server_name www.sarafai.ru;

    include h5bp/advanced2.conf;

    # SSL
    ssl_certificate /etc/letsencrypt/live/sarafai.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/sarafai.ru/privkey.pem; # managed by Certbot
    ssl_trusted_certificate /etc/letsencrypt/live/sarafai.ru/fullchain.pem;

    return 301 https://sarafai.ru$request_uri;

}

server {
    #listen [::]:443 ssl http2;
    #listen 443 ssl http2;
    #listen 443 quic reuseport;
    listen 443 ssl;

    http2 on;

    server_name sarafai.ru lk.sarafai.ru;

    charset utf-8;

    root /srv/projects/env3/src;

#    root /var/www/sarafai.ru;
#    index sarafai.html;

    location /static {
        alias /srv/projects/env3/src/static;
        autoindex off;
    }

    location = /robots.txt {
        log_not_found off;
        access_log off;
        return 200 "Host: https://sarafai.ru\n";
    }

    location = /favicon.ico {
        log_not_found off;
        access_log off;
        alias /srv/projects/env3/src/static/favicons/favicon.ico;
    }

    location = /sitemap.xml {
        log_not_found on;
        access_log on;
        alias /srv/projects/env3/src/static/sitemap.xml;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_redirect off;

        ## для перенаправления браузеров в quic-порт
        #add_header Alt-Svc 'h3=":443"; ma=86400';

        proxy_pass http://python_sarafai_ru;

#         try_files $uri $uri/ =404;
    }

    # SSL
    ssl_certificate /etc/letsencrypt/live/sarafai.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/sarafai.ru/privkey.pem; # managed by Certbot
    ssl_trusted_certificate /etc/letsencrypt/live/sarafai.ru/fullchain.pem;

    # error_log /var/log/nginx/sarafai.ru_error.log;
    # access_log /var/log/nginx/sarafai.ru_access.log;
    error_log /srv/projects/env3/logs/nginx/sarafai.ru_error.log;
    access_log /srv/projects/env3/logs/nginx/sarafai.ru_access.log;

    include gzip.conf;
    include h5bp/advanced2.conf;


}