local rootDir, user, group = ...

%>
worker_processes	4;
user <%=user%> <%=group%>;
pid /var/run/luanhost_nginx.pid;

events {
	worker_connections	4096;
}

http { 
	include mime.types;
	default_type application/octet-stream;
	sendfile on;
	keepalive_timeout 65;

	proxy_cache_path <%=rootDir%>/local/nginx_cache levels=1:2 keys_zone=nginx_cache:60m max_size=10g inactive=60m use_temp_path=off;

	upstream luan {
		server 127.0.0.1:8080;
	}

	server {
		listen 80 default_server;
		listen [::]:80 default_server;
		include nginx.default.conf;

		location /.well-known/acme-challenge/ {
			# $host/ssl does not exist for non-ssl sites and requests to here
			# will fail with 404 for those sites, which is what we want
			alias <%=rootDir%>/sites/$host/ssl/acme-challenge/;
			try_files $uri $uri/ =404;
		}
	}

	# glob pattern returns no results for site dirs that don't have 
	# the ssl/ subdir, so this is ok
	include <%=rootDir%>/sites/*/ssl/nginx.ssl.conf;
}
<%