server {
    listen 443 ssl http2;
    server_name www.themself.eu;
    server_tokens off;
    include snippets/ssl-params.conf;
    return 301 https://themself.eu$request_uri;
}

server {
    listen 443 ssl http2;
    server_name themself.eu;
    server_tokens off;
    include snippets/ssl-params.conf;
    include snippets/security-headers.conf;
    
    location / {
        limit_req zone=ip_limit burst=20 nodelay;
        proxy_pass http://themself-eu-container:${PORT:-3000};
        include snippets/proxy-headers.conf;
        include snippets/proxy-optimization.conf;
    }
    
    location ~* \.(?:jpg|jpeg|png|gif|ico|css|js|svg|webp|woff2)$ {
        include snippets/static-cache.conf;
    }
    
    location ~ ^/(images|gallery|photos)/ {
        include snippets/image-cache.conf;
    }
}