oab_nginx

# REDIRECTS - EVERYTHING TO HTTPS AND NO WWW
server {
    listen      80;
    server_name teambutton.org *.teambutton.org;
    return 301 https://openaccessbutton.org$request_uri?team=true;
}
server {
    listen      443 ssl;
    server_name teambutton.org *.teambutton.org;
    return 301 https://openaccessbutton.org$request_uri?team=true;
}

server {
    listen      80;
    server_name opendatabutton.org *.opendatabutton.org;
    return 301 https://openaccessbutton.org$request_uri?odb=true;
}
server {
    listen      443 ssl;
    server_name opendatabutton.org *.opendatabutton.org;
    return 301 https://openaccessbutton.org$request_uri?odb=true;
}

server {
    listen      80;
    server_name api.openaccessbutton.org;
    return 301 https://api.openaccessbutton.org$request_uri;
}

server {
    listen      80;
    server_name www.openaccessbutton.org;
    return 301 https://openaccessbutton.org$request_uri;
}
server {
    listen      80;
    server_name openaccessbutton.org;
    return 301 https://openaccessbutton.org$request_uri;
}
server {
    listen      443 ssl;
    server_name www.openaccessbutton.org;
    return 301 https://openaccessbutton.org;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/www.openaccessbutton.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.openaccessbutton.org/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
    ssl_prefer_server_ciphers on;
    ssl_stapling on;
    add_header Strict-Transport-Security "max-age=31536000;";

    location ^~ /.well-known/acme-challenge/ {
        default_type "text/plain";
        root /var/www/letsencrypt;
    }
    location = /.well-known/acme-challenge/ {
        return 404;
    }
}

server {
    listen      80;
    server_name blog.openaccessbutton.org;
    return 301 https://oabutton.ghost.io$request_uri;
}
server {
    listen      443 ssl;
    server_name blog.openaccessbutton.org;
    return 301 https://oabutton.ghost.io$request_uri;
}

server {
  listen 443;
  server_name openaccessbutton.org;
  root /home/cloo/live/openresearchbutton/website;

  ssl on;
  ssl_certificate /etc/letsencrypt/live/openaccessbutton.org/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/openaccessbutton.org/privkey.pem;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
  ssl_prefer_server_ciphers on;
  ssl_stapling on;
  add_header Strict-Transport-Security "max-age=31536000;";

  location ^~ /.well-known/acme-challenge/ {
    default_type "text/plain";
    root /var/www/letsencrypt;
  }
  location = /.well-known/acme-challenge/ {
    return 404;
  }

  add_header Pragma public;
  add_header Cache-Control "public";
  add_header Access-Control-Allow-Origin *;

  rewrite ^/requests /request;
  rewrite ^/request/.*$ /request/item last;
  rewrite ^/response/.*$ /response/item last;
  rewrite ^/dnr/.*$ /dnr/item last;

  location / {
    try_files /serve/$uri /serve/$uri.html /serve/$uri/index.html /serve/404.html =404;
  }

  location /content {
    try_files $uri $uri.html $uri.md $uri/index $uri/index.html $uri/index.md =404;
  }
  
  location /static {
    try_files /serve/$uri $uri =404;
    expires 30d;
  }

  location = /instantill_alpha {
    rewrite ^/.* https://instantill.org/setup;
  }
  location = /instantill {
    rewrite ^/.* https://instantill.org;
  }
  location = /shareyourpaper.org {
    rewrite ^/.* https://shareyourpaper.org;
  }

  location /blog {
    rewrite ^/.* https://oabutton.ghost.io permanent;
  }
  location /blog/new-oab-2016 {
    rewrite ^/.* https://oabutton.ghost.io/take-action-this-open-access-week-with-the-new-open-access-button-e9372c5cb4aa permanent;
  }
  location /blog/open-data-button-is-here {
    rewrite ^/.* https://oabutton.ghost.io/new-app-helps-researchers-share-data-openly-be59437ed6fa permanent;
  }
  location /blog/may-major-updates {
    rewrite ^/.* https://oabutton.ghost.io/open-data-button-launch-update-fd5d7c4e8a74 permanent;
  }
  location /blog/open-data-button-beta {
    rewrite ^/.* https://oabutton.ghost.io/open-data-button-beta-launching-next-week-for-open-data-day-8ab4d0e222a3 permanent;
  }
  location /blog/from_open_access_to_open_data {
    rewrite ^/.* https://oabutton.ghost.io/the-open-access-button-moves-into-open-data-7752f73f7f16 permanent;
  }
  location /blog/standwithdiego {
    rewrite ^/.* https://oabutton.ghost.io/diego-gomez-stands-trial-for-sharing-research-standwithdiego-7bc1f8fadeab permanent;
  }
  location /blog/diego-gomez {
    rewrite ^/.* https://oabutton.ghost.io/support-diego-gomez-an-update-a0e18d0afb96 permanent;
  }
  location /blog/opencon2015 {
    rewrite ^/.* https://oabutton.ghost.io/opencon-applications-are-open-ff694021d72 permanent;
  }
  location /blog/annual-report-2014 {
    rewrite ^/.* https://oabutton.ghost.io/open-access-button-annual-report-2014-90906c2cf12e permanent;
  }
  location /blog/jisc2015 {
    rewrite ^/.* https://oabutton.ghost.io/support-us-in-the-jisc-supporting-technology-startup-project-bfbeec0b50cd permanent;
  }
  location /blog/innovator-award {
    rewrite ^/.* https://oabutton.ghost.io/open-access-button-founders-honoured-with-sparc-innovator-award-22a57e9f5039 permanent;
  }
  location /blog/end-year-team-memo {
    rewrite ^/.* https://oabutton.ghost.io/open-access-button-annual-report-2014-90906c2cf12e permanent;
  }
  location /blog/odb-launch-update {
    rewrite ^/.* https://oabutton.ghost.io/open-data-button-launch-update-fd5d7c4e8a74 permanent;
  }
  location /blog/new-apps-find-free-access-to-scientific-and-scholarly-research {
    rewrite ^/.* https://oabutton.ghost.io/21-october-2014-631d530eb8ca permanent;
  }

  location ~ /url/(?<url>.+) {
    proxy_pass http://noddy_dev/api/academic/redirect?url=$url;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /doi {
    proxy_pass http://noddy/api/academic/redirect/doi;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /pmc {
    proxy_pass http://noddy/api/academic/redirect/pmc;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /pmid {
    proxy_pass http://noddy/api/academic/redirect/pmid;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /title {
    proxy_pass http://noddy/api/academic/redirect/title;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /citation {
    proxy_pass http://noddy/api/academic/redirect/citation;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }

}

server {
  listen 80;
  server_name ineedthisdoi.org;
  root /home/cloo/live/openresearchbutton/website/ineedthisdoi;

  location /static {
    try_files $uri $uri.html $uri/index $uri/index.html 404 /404 =404;
  }
  location = / {
    try_files $uri $uri.html /index.html;
  }
  location = /index.html {
    try_files $uri $uri.html /index.html;
  }
  location / {
    proxy_pass http://noddy/api/academic/redirect;
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
}

# SERVE LIVE API WITH CONNECT TO PREFERRED METEOR SERVICE (CLUSTER)
server {
    listen          443 ssl spdy;
    server_name     api.openaccessbutton.org;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/api.openaccessbutton.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/api.openaccessbutton.org/privkey.pem;

    location /availability {
        proxy_pass https://bg.oa.works/availability;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /find {
        proxy_pass https://bg.oa.works/find;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /permissions {
        proxy_pass https://bg.oa.works/permissions;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location ^~ /.well-known/acme-challenge/ {
        default_type "text/plain";
        root /var/www/letsencrypt;
    }
    location = /.well-known/acme-challenge/ {
        return 404;
    }

    location / {
        proxy_pass http://noddy/api/service/oab/;
        add_header Access-Control-Allow-Methods 'GET, PUT, POST, DELETE, OPTIONS';
        add_header Access-Control-Allow-Headers 'X-apikey,X-id,DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
}