server {
    server_name -;
    listen 80;
    listen [::]:80;

    #include /config/nginx/ssl.conf;

    # Automatic HTTPS redirection
    uninitialized_variable_warn off;
    if ($https = "on") {
        set $tls_redir off;
    }
    if ($tls_redir = "") {
        set $tls_redir on;
    }
    if ($tls_redir = "on") {
        rewrite ^ https://$host$request_uri;
    }

    root /app/arsse/www;

    location @arsse {
        # HTTP authentication may be enabled for this location, though this may impact some features
        include /config/nginx/fcgi.conf;
    }

    location @arsse_public {
        # HTTP authentication should not be enabled for this location
        include /config/nginx/fcgi.conf;
    }

    # Any provided static files
    location / {
        try_files $uri $uri/ =404;
    }

    # Nextcloud News protocol
    location /index.php/apps/news/api {
        try_files $uri @arsse;

        location ~ ^/index\.php/apps/news/api/?$ {
            try_files $uri @arsse_public;
        }
    }

    # Tiny Tiny RSS protocol
    location /tt-rss/api {
        try_files $uri @arsse;
    }

    # Tiny Tiny RSS feed icons
    location /tt-rss/feed-icons/ {
        try_files $uri @arsse;
    }

    # Tiny Tiny RSS special-feed icons; these are static files
    location /tt-rss/images/ {
        try_files $uri =404;
    }

    # Fever protocol
    location /fever/ {
        try_files $uri @arsse;
    }

    # Miniflux protocol
    location /v1/ {
        # If put behind HTTP authentication token login will not be possible
        try_files $uri @arsse;
    }

    # Miniflux version number
    location /version {
        try_files $uri @arsse_public;
    }

    # Miniflux "health check"
    location /healthcheck {
        try_files $uri @arsse_public;
    }
}