http2 on;
real_ip_header X-Forwarded-For;
set_real_ip_from ingress-nginx-controller-pods.ingress-nginx.svc.cluster00.balsillie.house;

server {
    listen 8080;
    server_name balsillie.net;

    location = /michael.vcf {
        default_type application/octet-stream;
        root   /usr/share/nginx/html;
    }

    location = /.well-known/autoconfig/mail/config-v1.1.xml {
        default_type application/octet-stream;
        root /usr/share/nginx/html;
    }

    location /.well-known/host-meta { # https://github.com/felx/mastodon-documentation/blob/master/Running-Mastodon/Serving_a_different_domain.md#configuring-domainorg
        return 301 https://social.balsillie.net$request_uri;
    }

    location /.well-known/webfinger {
        add_header Access-Control-Allow-Origin '*'; # https://docs.joinmastodon.org/admin/config/#web_domain
        return 301 https://social.balsillie.net$request_uri;
    }

    location /.well-known/nodeinfo {
        return 301 https://social.balsillie.net$request_uri;
    }

    location /.well-known/matrix/ {
        default_type application/json;
        root /usr/share/nginx/html;
    }

    location = / {
        return 301 https://blog.balsillie.net/;
    }
}

server {
    listen 8080;
    server_name matrix.balsillie.net;

    location /.well-known/matrix/ {
        default_type application/json;
        root /usr/share/nginx/html;
    }

    location / {
        return 404;
    }
}

server { 
    listen 8080;
    server_name mta-sts.balsillie.net;

    location = /.well-known/mta-sts.txt {
        default_type application/octet-stream;
        root /usr/share/nginx/html/mta-sts/balsillie_net;
    }

    location / {
        return 404;
    }
}

server { 
    listen 8080;
    server_name mta-sts.balsillie.email;

    location = /.well-known/mta-sts.txt {
        default_type application/octet-stream;
        root /usr/share/nginx/html/mta-sts/balsillie_email;
    }

    location / {
        return 404;
    }
}

server {
    listen 8080;
    server_name openpgpkey.balsillie.net openpgpkey.balsillie.email;

    location /.well-known/openpgpkey {
        default_type application/octet-stream;
        root /usr/share/nginx/html;
    }

    location / {
        return 404;
    }
}

server {
    listen 8080;
    server_name autoconfig.balsillie.net;

    location = /mail/config-v1.1.xml {
        default_type application/octet-stream;
        root /usr/share/nginx/html;
    }

    location / {
        return 404;
    }

}

server {
    listen 8080;
    server_name account.balsillie.net auth-admin.balsillie.net;

    location / {
        return 301 https://auth.balsillie.net/realms/balsillie/account;
    }
}

server {
    listen 8080;
    server_name notify.balsillie.net;

    location / {
        return 301 https://notify.balsillie.net:9000$request_uri;
    }
}