#!/bin/bash

# force either www or non in ssl.conf

DATE=$(date +"%Y%m%d_%H%M%S")

cp -rf /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf-bk${DATE}

while head -1 /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf | grep -q '^#'
do
	sed -i -e "1d" /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf
done

if [ $(grep -E '^([[:space:]].+?)?server {' /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf | wc -l ) = 1  ] && $2=nonwww
then

sed -i '1i\
################ Redirecting www to non www ################\
server {\
  listen 443 ssl http2;\
  server_name REPLACEME;\
  #ssl_dhparam /usr/local/nginx/conf/ssl/REPLACEME/dhparam.pem;\
  ssl_certificate      /usr/local/nginx/conf/ssl/REPLACEME/REPLACEME.crt;\
  ssl_certificate_key  /usr/local/nginx/conf/ssl/REPLACEME/REPLACEME.key;\
  include /usr/local/nginx/conf/ssl_include.conf;\
  # cloudflare authenticated origin pull cert community.centminmod.com/threads/13847/\
  #ssl_client_certificate /usr/local/nginx/conf/ssl/cloudflare/REPLACEME/origin.crt;\
  #ssl_verify_client on;\
  http2_max_field_size 16k;\
  http2_max_header_size 32k;\
  http2_max_requests 5000;\
  # mozilla recommended\
  ssl_ciphers TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS;\
  ssl_prefer_server_ciphers   on;\
  #add_header Alternate-Protocol  443:npn-spdy/3;\
  location / {\
    include /usr/local/nginx/conf/wpincludes/REPLACEME/redirects.conf;\
    return 301 https://REPLACEME$request_uri;\
  }\
}\
################ Redirecting www to non www ################\
' /usr/local/nginx/conf/conf.d/asardigital.com.ssl.conf