server {
listen      %ip%:%proxy_ssl_port% ssl http2;
server_name %domain_idn% %alias_idn%;
root        /var/lib/snappymail;
index       index.php index.html index.htm;
access_log /var/log/nginx/domains/%domain%.log combined;
error_log  /var/log/nginx/domains/%domain%.error.log error;

ssl_certificate     %ssl_pem%;
ssl_certificate_key %ssl_key%;
ssl_stapling on;
ssl_stapling_verify on;

location ^~ /data {
    deny all;
    return 404;
}

location ~ ^/(README.md|config|temp|logs|bin|SQL|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
    deny all;
    return 404;
}

location / {
    proxy_pass https://%ip%:%web_ssl_port%;
    try_files $uri $uri/ =404;
    alias /var/lib/snappymail/;
    location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|woff2|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|webp|ico|bmp|mid|midi|wav|rtf|css|js|jar)$ {
        expires 7d;
        fastcgi_hide_header "Set-Cookie";
    }
}

location /error/ {
    alias /var/www/document_errors/;
}

location @fallback {
    proxy_pass https://%ip%:%web_ssl_port%;
}

proxy_hide_header Upgrade;

include %home%/%user%/conf/mail/%root_domain%/%proxy_system%.ssl.conf_*;
}
