server {
    server_name ofm tiles.openfreemap.org;

    # ssl: https://ssl-config.mozilla.org / modern config
    # to be used with the Cloudflare proxied endpoint

    listen 80;
    listen 443 ssl;
    listen [::]:443 ssl;
    http2 on;

    ssl_certificate /data/nginx/certs/openfreemap.org.cert;
    ssl_certificate_key /data/nginx/certs/openfreemap.org.key;
    ssl_session_timeout 1d;
    ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
    ssl_session_tickets off;
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers off;

    # access log normally not enabled
    #access_log /data/ofm/http_host/logs_nginx/tiles-org-access.log access_json buffer=32k;
    access_log off;

    error_log /data/ofm/http_host/logs_nginx/tiles-org-error.log;

    ___LOCATION_BLOCKS___

    # we need to handle missing tiles as valid request returning empty string
    location @empty {
        default_type application/vnd.mapbox-vector-tile;
        return 200 '';

        add_header 'Access-Control-Allow-Origin' '*' always;
        add_header Cache-Control public;
        expires 10y;
    }
}