exchange2010-16

###########################################################################################
#                                  BEFORE YOU USE THIS CODE                               #
#         Use 'BASIC' authentication within the Outlook Anywhere connection setup         #
#                           !unless you have the pro edition!.                            #
# 'Windows Authentication' is disabled in your IIS application settings for EWS, OWA etc. #
#       as NGINX will return an error 401 if 'Basic Authentication' is not enabled        #
###########################################################################################

server {
listen 443 ssl;
  server_name [domainname] [domainname2];
  
    location / {
            return 301 https://[domainname]/owa;
    }
  
  ssl_certificate /etc/letsencrypt/live/[domainname]/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/[domainname]/privkey.pem;
  client_max_body_size 3G;
  proxy_request_buffering off;
  ssl_session_timeout     5m;
 
  tcp_nodelay on;
    proxy_http_version      1.1;
    proxy_read_timeout      360;
    proxy_pass_header       Date;
    proxy_pass_header       Server;
    proxy_pass_header      Authorization;
    proxy_set_header        Host $host;
    proxy_set_header        X-Real-IP $remote_addr;
    proxy_set_header        X-Forwarded-For  $proxy_add_x_forwarded_for;
    proxy_pass_request_headers on;
    more_set_input_headers 'Authorization: $http_authorization';
    proxy_set_header Accept-Encoding "";
    more_set_headers -s 401 'WWW-Authenticate: Basic realm="fqlocaldomain"';
    proxy_buffering off;
    proxy_set_header Connection "Keep-Alive";

    location ~* ^/owa { proxy_pass https://fqlocaldomain; }
    location ~* ^/Microsoft-Server-ActiveSync { proxy_pass https://fqlocaldomain; }
    location ~* ^/ecp { proxy_pass https://fqlocaldomain; }
    location ~* ^/rpc { proxy_pass https://fqlocaldomain; }
    location ~* ^/mapi { proxy_pass https://fqlocaldomain; }
    location ~* ^/ews { proxy_pass https://fqlocaldomain; }
    location ~* ^/autodiscover { proxy_pass https://fqlocaldomain; }
}
server {
    listen 80;
    #listen [::]:80;
    server_name [domainname] [domainname2];
    return 301 https://[domainname];
}