upstream jaraco-site-procs {
        server [::1]:5000;
}

server {
        listen 80;
        listen [::]:80;

        server_name jaraco.com www.jaraco.com blog.jaraco.com scicomm.pro www.scicomm.pro;

        return 301 https://$host$request_uri;
}

server {
        listen 443;
        listen [::]:443;

        ssl on;
        ssl_certificate /etc/letsencrypt/live/jaraco.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/jaraco.com/privkey.pem;

        server_name jaraco.com www.jaraco.com;

        location / {
                proxy_pass http://jaraco-site-procs;
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $server_name;
        }
}

server {
        listen 443;
        listen [::]:443;

        ssl on;
        ssl_certificate /etc/letsencrypt/live/jaraco.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/jaraco.com/privkey.pem;

        server_name blog.jaraco.com;

        location / {
                proxy_pass http://jaraco.github.io;
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $server_name;
        }
}

server {
        listen 80;
        listen [::]:80;
        listen 443 ssl;
        listen [::]:443 ssl;

        ssl_certificate /etc/letsencrypt/live/pittsburghfreethoughtcommunity.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/pittsburghfreethoughtcommunity.com/privkey.pem;

        server_name pittsburghfreethoughtcommunity.com www.pittsburghfreethoughtcommunity.com;

        return 301 https://pghfreethought.org$request_uri;
}

server {
        listen 443 ssl;
        listen [::]:443 ssl;

        ssl on;
        ssl_certificate /etc/letsencrypt/live/scicomm.pro/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/scicomm.pro/privkey.pem;

        server_name scicomm.pro www.scicomm.pro;

        root /opt/scicomm.pro;
        index index.html;
}
