server {
    listen 80;
    listen [::]:80;

    server_name $HOST_RADIUS;
    return 301 https://$HOST_RADIUS${DOLAR}request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443;

    server_name $HOST_RADIUS;

    ssl_certificate /etc/nginx/certs/fullchain.pem;
    ssl_certificate_key /etc/nginx/certs/privkey.pem;

    root /opt/radius/web;

    location /bundles/ {
        root /opt/radius/web;
    }

    location / {
        try_files ${DOLAR}uri /app.php${DOLAR}is_args${DOLAR}args;
    }

    # DEV
    location ~ ^/(app_dev|config)\.php(/|$) {
        fastcgi_pass unix:/tmp/radius/radius.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME ${DOLAR}realpath_root${DOLAR}fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT ${DOLAR}realpath_root;
        fastcgi_ignore_client_abort on;
	fastcgi_param REMOTE_ADDR ${DOLAR}http_x_real_ip;
    }

    # PROD
    location ~ ^/app\.php(/|$) {
        fastcgi_pass unix:/tmp/radius/radius.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME ${DOLAR}realpath_root${DOLAR}fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT ${DOLAR}realpath_root;
        fastcgi_ignore_client_abort on;
	fastcgi_param REMOTE_ADDR ${DOLAR}http_x_real_ip;
        internal;
    }

    location ~ \.php$ {
      return 404;
    }
}