# Managed in Puppet
# Server status
server {
  listen *:80;
  location /ping/ {
    alias /var/www/os/;
    if ($request_filename !~ /var/www/os/(.*)) {
      return 404;
    }
  }
  location / {
    expires epoch;
    alias /var/www/os/routeless_site/;
    if ($request_filename !~ /var/www/os/routeless_site/(.*)) {
      return 404;
    }
  }
}

server {
  listen *:443 ssl http2;
  ssl_certificate           /etc/pki/opal.cert;
  ssl_certificate_key       /etc/pki/opal.key;

  add_header Strict-Transport-Security "max-age=31536000" always;
  add_header X-XSS-Protection "1; mode=block" always;
  add_header X-Content-Type-Options "nosniff" always;
  add_header X-Frame-Options "DENY" always;
  add_header Cache-Control "no-cache, max-age=off";

  location /ping/ {
    alias /var/www/os/;
    if ($request_filename !~ /var/www/os/(.*)) {
      return 404;
    }
  }
  location / {
    expires epoch;
    alias /var/www/os/routeless_site/;
    if ($request_filename !~ /var/www/os/routeless_site/(.*)) {
      return 404;
    }
  }
}