server {
	listen 80;
	listen [::]:80;
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name mirror.system.is;

	ssl on;
	ssl_certificate /etc/certificates/is.system.mirror/crt;
	ssl_certificate_key /etc/certificates/is.system.mirror/key;

	add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload;" always;
	add_header X-Content-Type-Options "nosniff" always;
	add_header X-Frame-Options "DENY" always;

	root /media/data/mirror;

	location / {
		autoindex on;
	}
}