server {
    listen 80; 
    listen [::]:80;
    server_name piwigo.bleschet.fr;
    location /.well-known/acme-challenge {
        root /usr/share/nginx/html;
        allow all;
    }   
    location / { 
        return 301 https://$host$request_uri;
    }   
}

server {
    server_name piwigo.bleschet.fr;
    listen 443 ssl http2;

    # SSL Certificates
    ssl_certificate /etc/letsencrypt/live/piwigo.bleschet.fr/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/piwigo.bleschet.fr/privkey.pem;

    # Enable session caching, increase session timeout
    ssl_session_cache shared:SSL:20m;
    ssl_session_timeout 60m;
        add_header X-Frame-Options "deny";
        add_header Strict-Transport-Security "max-age=60; preload";
        add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
    location / { 
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        client_max_body_size 10m;
        client_body_buffer_size 128k;
        proxy_connect_timeout 15; 
        proxy_send_timeout 15; 
        proxy_read_timeout 15; 
        proxy_buffering on; 
        expires 1d; 
    }   
}

<VirtualHost 127.0.0.1:8080>
        ServerName piwigo.bleschet.fr
        DocumentRoot /var/www/html/piwigo

        ErrorLog "/var/log/apache2/piwigo_error.log"
        CustomLog "/var/log/apache2/piwigo_access.log" "realip"
        KeepAlive On

        <Directory /var/www/html/piwigo>
                Options -Indexes +FollowSymLinks
                Require all granted
                AllowOverride None
        </Directory>
</VirtualHost>