server {

    listen 80;
    server_name *******.fr; 
    rewrite ^ https://***.fr$request_uri?;

}

server {

    listen 443 ssl;
    server_name ******.fr; 
    root /var/www/cakebox/public;
    index index.php;


    ssl_certificate /etc/nginx/ssl/***_chain.pem;
    ssl_certificate_key /etc/nginx/ssl/sd.key.pem;
    ssl_session_timeout 5m;
    ssl_prefer_server_ciphers on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ALL:!aNULL:!eNULL:!LOW:!EXP:!RC4:!3DES:+HIGH:+MEDIUM;

    auth_basic "seedbox";
    auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd";

    charset utf-8;
    include /etc/nginx/conf.d/cache;

    access_log /var/log/nginx/cakebox-access.log;
    error_log /var/log/nginx/cakebox-error.log;

    location = / {
        try_files @site @site;
    }

    location / {
        try_files $uri $uri/ @site;
    }

    location /<user1>/ {
        alias /home/<user1>/torrents/;
        add_header Content-Disposition "attachment";
        satisfy any;
        allow all;
    }

    ## etc si d'autre utilisateur ##

    location @site {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        fastcgi_param APPLICATION_ENV production;

        ## uncomment when running via https
        fastcgi_param HTTPS on;
    }
}