include root-base.conf;

worker_processes 8;

user nobody nogroup;

http {
    include http-base.conf;

    include hosted-http-base.conf;

    server {
        include server-base.conf;

        listen 443 default;

        ssl on;
        ssl_certificate ./certs/quay-unified.cert;
        ssl_certificate_key ./certs/quay.key;
        ssl_session_timeout 5m;
        ssl_protocols SSLv3 TLSv1;
        ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
        ssl_prefer_server_ciphers on;

        location /static/ {
            # checks for static file, if not found proxy to app
            alias /home/ubuntu/quay/static/;
        }
    }
}