server {
	listen 80;
	listen [::]:80;
	listen 443 ssl spdy;
	listen [::]:443 ssl spdy;
	ssl_certificate /etc/ssl/fullchain.pem;
	ssl_certificate_key /etc/ssl/key.pem;
	ssl_session_cache shared:SSL:5m;
	ssl_session_timeout 5m;
	add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers "AES:!ADH:!AECDH:!MD5:!DSS";
	ssl_prefer_server_ciphers on;
	server_name graphite.{{ freifunk.domain }};
	root /var/www/html;
	index index.html;
	charset     utf-8;
	location / {
		uwsgi_pass  unix:/run/uwsgi/app/graphite/socket;
		include     uwsgi_params;
	}
	location /content/ {
		alias /var/lib/graphite/webapp/content/;
	}
	location /.well-known/ {
		alias /var/www/html/.well-known/;
		try_files $uri $uri/ =404;
	}
}