server {
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name {{ ([dns_name] + tls_domains|default([])) | join(" ") }};

	http2 on;
	ssl_certificate /etc/letsencrypt/live/{{ dns_name }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ dns_name }}/privkey.pem;

	client_max_body_size 100M;

	root /srv/http/kanboard;
	index index.php;

	location ~ ^/data/ { deny all; }

	location ~ \.php$ {
		try_files $uri $uri/ /doku.php;

		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param REDIRECT_STATUS 200;
		fastcgi_param HTTPS on;
		fastcgi_pass unix:/run/php-fpm.socket;
	}
}