server {
	listen 80 default_server;
	listen 65443 ssl;
	
	server_name _;
	
	ssl_certificate /etc/ocserv/server.crt.pem;
	ssl_certificate_key /etc/ocserv/server.key.pem;
	ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1 TLSv1;
	ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5:!RC4;
	ssl_prefer_server_ciphers on;
	ssl_session_cache shared:SSL:16m;
	ssl_buffer_size 4k;
	ssl_stapling off;
	ssl_stapling_verify off;
	
	autoindex on;
	gzip off;
	
	root /var/www/html;
	index index.html;

	if ($scheme != "https") { return 302 "https://$host:65443$request_uri"; }

	location / {
		try_files $uri $uri/ =404;
	}
}