# rainloop.conf
server {
    listen 80;
    server_name mail.szjyxqn.com;
    return 301 https://$host$request_uri;
}

server {
    server_name mail.szjyxqn.com;
    listen 443 ssl;
    index weihu.php index.php index.htm;
    root /ewomail/www/rainloop;

    location ^~ /data {
        deny all;
    }

    ssl_certificate /etc/ssl/certs/dovecot.pem;
    ssl_certificate_key /etc/ssl/private/dovecot.pem;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384';

    error_page 497 https://$host:$server_port$request_uri;

    location ~ \.php$ {
        fastcgi_pass   127.0.0.1:9005;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_param  PHP_VALUE        "open_basedir=/ewomail/www/:/tmp/:/proc/\nsession.save_path=/ewomail/www/session/webmail";
        include        fastcgi_params;
    }
}