# Upstream sites for proxy-ing
upstream wp {
     server craft-wp;
}

### Redirect regular traffic to SSL
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    server_name craftinamerica.org www.craftinamerica.org;

    location / {
        proxy_set_header    Host                 $host;
        proxy_set_header    X-Real-IP            $remote_addr;
        proxy_set_header    X-Forwarded-For      $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto    $scheme;

        proxy_pass          http://wp;
        proxy_redirect      off;
    }
}

### SSL Stuff
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name craftinamerica.org www.craftinamerica.org;

    include snippets/letsencrypt.conf;
    include snippets/ssl-params.conf;
	
    location / {
        #blocks blank user_agents
        if ($http_user_agent = "") { return  301 $scheme://www.google.com/; }
        
        proxy_set_header        Host              $host;
        proxy_set_header        X-Real-IP         $remote_addr;
        proxy_set_header        X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        proxy_set_header        Accept-Encoding   "";
        proxy_set_header        Proxy             "";

        proxy_pass              http://wp;
        proxy_redirect          off;
        
        proxy_connect_timeout   300;
        proxy_send_timeout      300;
        proxy_read_timeout      300;
    }

    location ~/\.ht {
        deny all;
    }
}