server {
	listen [::]:443 ssl http2;
	listen 443 ssl http2;

	server_name {{ mailserver_roundcubemail_domain }};

	ssl_certificate /etc/dehydrated/certs/{{ mailserver_roundcubemail_domain }}/fullchain.pem;
	ssl_certificate_key /etc/dehydrated/certs/{{ mailserver_roundcubemail_domain }}/privkey.pem;

	include snippets/letsencrypt.conf;

	root /usr/share/webapps/roundcubemail;
	index index.html index.htm index.php;

	location ~ \.php(?:$|/) {
		fastcgi_split_path_info ^(.+.php)(/.+)$;
		fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
		fastcgi_index index.php;
	
		include fastcgi.conf;

		fastcgi_param PHP_ADMIN_VALUE open_basedir=/etc/webapps/roundcubemail/:/usr/share/webapps/roundcubemail:/var/log/roundcubemail/:/var/cache/roundcubemail/:/tmp:/usr/share/pear:/dev/urandom;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $fastcgi_path_info;
		fastcgi_param HTTPS on;
	}
}