server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name mafreebox.freebox.fr;

    #root /var/www/niver;
    #index index.php index.html index.htm;
    #try_files $uri $uri/ @extensionless-php; # $uri.html

    include inc/tls.conf;
    include inc/errors.conf;

    error_log /var/log/nginx/freebox-error.log info;
    access_log /var/log/nginx/freebox-access.log;

    #more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none';";

    #location ~ ^/motrig/(db|less|lessphp|inc|niver.log) {
    #    return 403;
    #}
    location / {
        allow 2a0b:cbc0:1103:2::106f;
        allow 192.168.1.9;
	deny all;
        proxy_pass https://mafreebox.freebox.fr;
        proxy_ssl_verify off;    
    }

    #location ~ \.inc.php$ {
   #    return 403;
   # }

    #location ~ \.php$ {
    #    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    #    fastcgi_pass unix:/var/run/php/niver.sock;
    #    #fastcgi_index index.php;
    #    include inc/fastcgi.conf;
    #    try_files $uri =404;
    #}

    #location @extensionless-php {
    #    rewrite ^(.*)$ $1.php last;
    #}

    ssl_certificate /etc/letsencrypt/live/niver.4.niv.re/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/niver.4.niv.re/privkey.pem;
}