dav_ext_lock_zone zone=foo:10m;

server {

    listen 443 quic;
    listen 443 ssl;
    listen [::]:443 ssl;
    listen [::]:443 quic;

    if ($bad_user_agent = 1) { return 444;}
    if ($bad_referer = 1) { return 444; } 

    server_name webdav.k-45.ru;
    root /www/dav/;
    index index.html index.htm;
    access_log syslog:server=unix:/dev/log,tag=webdav,nohostname main if=$loggable;

    send_timeout 3600;
    client_body_timeout 3600;
    keepalive_timeout 3600;
    lingering_timeout 3600;
    client_max_body_size 0;

    add_header Strict-Transport-Security "max-age=31536000";
    add_header X-Content-Type-Options nosniff;

    include /www/nginx/favicon.conf;

    location / {

        set $destination $http_destination;
        set $parse "";
        if ($request_method = MOVE) {
            set $parse "${parse}M";
        }

        if ($request_method = COPY) {
            set $parse "${parse}M";
        }

        if (-d $request_filename) {
            rewrite ^(.*[^/])$ $1/ break;
            set $parse "${parse}D";
        }

        if ($destination ~ ^https://webdav.k-45.ru/(.*)$) {
            set $ob $1;
            set $parse "${parse}R${ob}";
        }

        if ($parse ~ ^MDR(.*[^/])$) {
            set $mvpath $1;
            set $destination "https://webdav.k-45.ru/${mvpath}/";
            more_set_input_headers "Destination: $destination";
        }

        if ($request_method = MKCOL) {
            rewrite ^(.*[^/])$ $1/ break;
        }

        if (-d $request_filename) {
            rewrite ^(.*[^/])$ $1/ break;
        }

        auth_basic "Restricted site.";
        auth_basic_user_file /etc/nginx/webdav.passwd;

        # Deny all access unless authenticated
        satisfy all;
        allow all;  # This allows all authenticated users
        deny all;   # This denies all other users

        client_body_temp_path /var/tmp/nginx;
        dav_methods PUT DELETE MKCOL COPY MOVE;
        dav_ext_methods PROPFIND OPTIONS LOCK UNLOCK;
        #dav_ext_methods PROPFIND OPTIONS;
        create_full_put_path on;

        dav_ext_lock zone=foo;

        dav_access user:rw group:rw all:r;
        autoindex on;

        fancyindex    on;
        fancyindex_exact_size off;

    }

    location ~ \.(_.*|DS_Store|Spotlight-V100|TemporaryItems|Trashes|hidden|localized)$ {
        access_log  off;

        if ($request_method = PUT) {
            return 403;
        }
        return 404;
    }

    location ~ \.metadata_never_index$ {
        return 200 "Don't index this drive, Finder!";
    }

}

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.webdav.k-45.ru;
        return 301 https://webdav.k-45.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name webdav.k-45.ru www.webdav.k-45.ru;
        return 301 https://webdav.k-45.ru$request_uri;
    }