server {
	listen			202.61.255.116:443 ssl http2;
	listen			[2a03:4000:55:d20::]:443 ssl http2;

	server_name		scooper.irc.lsd.systems;

	ssl_certificate			/etc/ssl/irc/fullchain.pem;
	ssl_certificate_key		/etc/ssl/irc/private/privkey.pem;
	ssl_session_timeout		1d;
	ssl_session_cache		shared:MozSSLS:10m;
	ssl_session_tickets		off;
	ssl_protocols			TLSv1.3;
	ssl_prefer_server_ciphers	off;
	add_header			Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling			on;
	ssl_stapling_verify		on;
	ssl_trusted_certificate		/etc/ssl/ca-bundle.pem;
	resolver			127.0.0.4;

	location			/ {
		fastcgi_pass		unix:/var/run/kfcgi/scooper.sock;
		fastcgi_split_path_info	(/)(.*);
		fastcgi_param		PATH_INFO $fastcgi_path_info;
		include			fastcgi_params;
                auth_basic              "I <3 Internet Relay Chat";
                auth_basic_user_file    /mnt/gluster01/web/auth/scooper;
	}
}