server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name lists.libraryofcode.org;

    ssl_certificate /etc/nginx/ssl/org.chain.crt;
    ssl_certificate_key /etc/nginx/ssl/org.key.pem;

    ssl_session_cache builtin:1000 shared:SSL:10m;
    #include /etc/nginx/error/502;
    #include /etc/nginx/error/504;
    #include /etc/nginx/error/500;
    #include /etc/nginx/error/404;
    #include /etc/nginx/error/429;
    ssl_protocols TLSv1.2;

    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;

    ssl_prefer_server_ciphers on;

    ssl_stapling on;
    ssl_stapling_verify on;
    client_max_body_size 1G;
    #limit_req zone=one burst=15;


location / {
  return 307 $scheme://lists.libraryofcode.org/cgi-bin/mailman/listinfo;
}
location /cgi-bin/mailman {
       root /usr/lib/;
       fastcgi_split_path_info (^/cgi-bin/mailman/[^/]*)(.*)$;
       include /etc/nginx/fastcgi_params;
       fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
       fastcgi_param PATH_INFO $fastcgi_path_info;
       fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
       fastcgi_intercept_errors on;
       fastcgi_pass unix:/var/run/fcgiwrap.socket;
}
location /images/mailman {
       alias /usr/share/images/mailman;
}
location /pipermail {
       alias /var/lib/mailman/archives/public;
       autoindex on;
}
}