upstream bitwarden_kube_backend {
#	BITWARDEN SERVER DOCKER
#       server 192.168.88.50:8080;
#       NEW BITWARDEN SERVER kubernetes
#       server bitwarden-self-host-web.bitwarden-helm.svc:5000;
       server nginx.bitwarden.svc:8080;
#bitwarden-self-host-admin.bitwarden-helm.svc
#	OLD BITWARDEN SERVER
#       server 192.168.6.147;

#       server 1.1.1.1 backup;
    }

server {
	server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
        location / {
		proxy_pass http://bitwarden_kube_backend;
        }
#        location /api/ {
#                proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
                #proxy_pass http://10.106.163.98:5000;
#        }
#        location /attachments/ {
#                proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
#        }        
#        location /icons/ {
#                proxy_pass http://bitwarden-self-host-icons.bitwarden-helm.svc:5000;
#        }
#        location /notifications/ {
#                proxy_pass http://bitwarden-self-host-notifications.bitwarden-helm.svc:5000;
#        }
#        location /events/ {
#                proxy_pass http://bitwarden-self-host-events.bitwarden-helm.svc:5000;
#        }
#        location /scim/ {
#                proxy_pass http://bitwarden-self-host-scim.bitwarden-helm.svc:5000;
#        }
#        location /sso/ {
#                proxy_pass http://bitwarden-self-host-sso.bitwarden-helm.svc:5000;
#        }
#        location /identity/ {
#                proxy_pass http://bitwarden-self-host-identity.bitwarden-helm.svc:5000;
#        }
#        location /admin/ {
#                proxy_pass http://bitwarden-self-host-admin.bitwarden-helm.svc:5000;
#        }
        location /.well-known/acme-challenge/ {
		root /var/www/certbot;
        }
	
	listen 443 ssl; # managed by Certbot
        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}


server {
    if ($host = www.bitwarden.tryton.geeraert.eu) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = bitwarden.tryton.geeraert.eu) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
    listen 80;
    return 404; # managed by Certbot

}