server {
	listen			202.61.255.116:443 ssl http2;
	listen			[2a03:4000:55:d20::]:443 ssl http2;

	server_name		www.lysergic.dev lysergic.dev;

	ssl_certificate			/etc/ssl/lysergic/fullchain.pem;
	ssl_certificate_key		/etc/ssl/lysergic/private/privkey.pem;
	ssl_session_timeout		1d;
	ssl_session_cache		shared:MozSSLS:10m;
	ssl_session_tickets		off;
	ssl_protocols			TLSv1.2 TLSv1.3;
	ssl_prefer_server_ciphers	off;
	add_header			Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling			on;
	ssl_stapling_verify		on;
	ssl_trusted_certificate		/etc/ssl/ca-bundle.pem;
	resolver			127.0.0.4;

	root			/srv/www/htdocs/bastelstube;
	index			index.html;
	

	location /.well-known/matrix/client {
        return 200 '{"m.homeserver": {"base_url": "https://matrix.lysergic.dev"}, "m.identity_server": {"base_url": "https://ident.matrix.liberta.casa"}}';
        default_type application/json;
        add_header Access-Control-Allow-Origin *;
	}

	location /.well-known/matrix/server {
        return 200 '{"m.server": "matrix.lysergic.dev:8448"}';
        default_type application/json;
        add_header Access-Control-Allow-Origin *;
	}
}