server {

  listen 443 ssl;
  listen [::]:443 ssl;

  keepalive_timeout 70;
  ssl_certificate /etc/ssl/duty.direct.yandex-team.ru.pem;
  ssl_certificate_key /etc/ssl/duty.direct.yandex-team.ru.pem;
  ssl_prefer_server_ciphers on;
  ssl_ciphers AES128-SHA:RC4-SHA:CAMELLIA128-SHA:AES256-SHA:DES-CBC3-SHA:HIGH:!MD5:!aNULL:!DH:!PSK:!SSLv2:!SRP;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_session_cache    shared:SSL:64m;
  ssl_session_timeout  5m;
  resolver 127.0.0.1;
  charset utf-8;
  error_log /var/log/nginx/duty-error.log error;
  access_log /var/log/nginx/duty-access.log combined;

  server_name duty.ppcgraphite.yandex-team.ru duty.direct.yandex-team.ru duty.ppcgraphite02i.yandex-team.ru duty.ppcgraphite02f.yandex-team.ru duty.ppcgraphite01i.yandex-team.ru duty.ppcgraphite02k.yandex-team.ru;

  location / {
        proxy_pass http://127.0.0.1:8989;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Ssl on;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }

  location /favicon.ico {
      root /var/www/;
      proxy_pass https://yandex.st/lego/_/bHNZQjCsqQwi2dp8XbjaQKsdcjA.ico;
  }
  location ~* \.(js|css)$ {
   #   //scripts/_mecano.css ;
      root /usr/lib/duty/scripts;
  }
  location ~* \.(woff|ttf)$ {
   #   // ;
      root /usr/lib/duty/;
  }
}

