server {
  listen 80 default_server;
  listen       [::]:80 default_server;
  server_name  _;
  root /;

  access_log /var/log/nginx/default-access.log;
  error_log /var/log/nginx/default-error.log;

  location / {
    allow all;
    autoindex on;
    default_type "text/plain";
  }

}

server {
    listen 443 ssl http2 default_server;
    listen [::]:443  ssl http2 default_server;
    server_name  _;
    root /var/www/html/;

    access_log /var/log/nginx/default-access.log;
    error_log /var/log/nginx/default-error.log;

#    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_certificate /etc/pki/self/self.crt;
    ssl_certificate_key /etc/pki/self/self.pem;

    keepalive_timeout   60;

    ssl_protocols TLSv1.2;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers off;

    add_header Strict-Transport-Security 'max-age=31536000';
    ssl_dhparam /etc/pki/self/dhparams.pem;
    location / {
        index index.html;
        try_files $uri $uri/ /index.html;
    }

    return 404;
}