nginx-ssl.conf

daemon off;
error_log stderr;
worker_processes 2;
env FORCE_HTTPS;

events {
       worker_connections 1024;
}
http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    access_log /dev/stdout;
    types_hash_max_size 2048;

    server {
        location / {
            # landing page redirects to london
            rewrite ^(/|/index.html)?$ /london-2017/ permanent;
            # generic code of conduct, newsletter redirects to berlin
            rewrite ^/(code-of-conduct|newsletter)(/)?(index.html)?$ /london-2017/ permanent;

            if ($http_x_forwarded_proto != "https") {
                set_by_lua $force_https 'return os.getenv("FORCE_HTTPS")';
            }
            if ($force_https) {
                rewrite ^(.*)$ https://$host$1 permanent;
            }
            root "/usr/share/nginx/html/";
            autoindex on;
            index index.html index.htm;
        }

        location ~* \.(?:css|gif|ico|jpe?g|js|png|svg|ttf|woff2?)$ {
            expires max;
            add_header Cache-Control "public";
        }

        add_header Strict-Transport-Security max-age=31536000;
        add_header X-Frame-Options DENY;
        add_header X-Content-Type-Options nosniff;
        add_header X-XSS-Protection "1; mode=block";
        add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; form-action 'self' https://www.mozilla.org; connect-src 'self' https://www.mozilla.org https://www.google-analytics.com; img-src 'self' data: https://www.google-analytics.com; font-src 'self'; frame-src 'self' https://air.mozilla.org https://www.google.com/maps/; child-src 'self' https://air.mozilla.org https://www.google.com/maps/ ";

        error_page 404 /404.html;
    }

    server {
        server_name www.viewsourceconf.org;
        rewrite ^(.*)$ https://viewsourceconf.org$1 permanent;
    }

    server {
      listen 443;
      server_name localhost;
      ssl on;
      ssl_certificate /etc/nginx/ssl/localhost.crt;
      ssl_certificate_key /etc/nginx/ssl/localhost.key;

      location / {
          # landing page redirects to london
          rewrite ^(/|/index.html)?$ /london-2017/ permanent;
          # generic code of conduct, newsletter redirects to berlin
          rewrite ^/(code-of-conduct|newsletter)(/)?(index.html)?$ /london-2017/ permanent;
          
          root "/usr/share/nginx/html/";
          autoindex on;
          index index.html index.htm;
      }

      # worker.js always needs to be fresh
      location = /worker.js {
          expires 0;
      }

      location ~* \.(?:css|gif|ico|jpe?g|js|png|svg|ttf|woff2?)$ {
          expires max;
          add_header Cache-Control "public";
      }

      location ~* \.(woff2)$ {
          types {font/woff2 woff2;}
      }

      add_header Strict-Transport-Security max-age=31536000;
      add_header X-Frame-Options DENY;
      add_header X-Content-Type-Options nosniff;
      add_header X-XSS-Protection "1; mode=block";
      add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; form-action 'self' https://www.mozilla.org; connect-src 'self' https://www.mozilla.org https://www.google-analytics.com; img-src 'self' data: https://www.google-analytics.com; font-src 'self'; frame-src 'self' https://air.mozilla.org https://www.google.com/maps/; child-src 'self' https://air.mozilla.org https://www.google.com/maps/ ";

      error_page 404 /404.html;
    }
}