server {
	listen			202.61.255.100:443 ssl http2;

	server_name		web.lib.radio.fm www.lib.radio.fm;

	ssl_certificate		/etc/ssl/radio/crt.crt;
	ssl_certificate_key	/etc/ssl/radio/private/key.key;

	ssl_session_timeout		1d;
	ssl_session_cache		shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets		off;
	ssl_protocols			TLSv1.2 TLSv1.3;
	ssl_prefer_server_ciphers	off;
	add_header			Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling			on;
	ssl_stapling_verify		on;
	ssl_trusted_certificate		/etc/ssl/ca-bundle.pem;
	resolver			127.0.0.4;

	location		/ {
		root		/srv/www/radio;
		index		index.php;
	}

	location 		~ [^/]\.php(/|$) {
		root		/srv/www/radio;
		index		index.php;
		fastcgi_pass    172.168.100.3:9100;
                include         fastcgi_params;
		fastcgi_param	SCRIPT_FILENAME /srv/www/radio/$fastcgi_script_name;
		fastcgi_index	index.php;
	}
}
server {
	listen			202.61.255.100:443 ssl http2;

	server_name		lib.radio.am web.lib.radio.am www.lib.radio.am;

	ssl_certificate		/etc/ssl/radio/crt.crt;
	ssl_certificate_key	/etc/ssl/radio/private/key.key;

	ssl_session_timeout		1d;
	ssl_session_cache		shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets		off;
	ssl_protocols			TLSv1.2 TLSv1.3;
	ssl_prefer_server_ciphers	off;
	add_header			Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling			on;
	ssl_stapling_verify		on;
	ssl_trusted_certificate		/etc/ssl/ca-bundle.pem;
	resolver			127.0.0.4;

	location		/ {
		root		/srv/www/icedrop-master;
		index		index.html;
                add_header	Access-Control-Allow-Origin '*' always;
	}
}