user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile           on;
    keepalive_timeout  65;

    server {
    listen 443 ssl;
    server_name             portal.tjegov.softline.main;
    #ssl_certificate         /cert/tjegov.softline.main.crt;
    #ssl_certificate_key     /cert/tjegov.softline.main.key;


        location / {
            proxy_pass http://portal:4000;
        }
    }

    server {
    listen 443 ssl;
    server_name             hukumatportal.tjegov.softline.main;
    #ssl_certificate         /cert/tjegov.softline.main.crt;
    #ssl_certificate_key     /cert/tjegov.softline.main.key;


        location / {
            proxy_pass http://hukumatportal:4000;
        }
        location /builder {
             proxy_pass http://hukumatportal:4000/builder;
             proxy_set_header        Host $host;
             proxy_set_header        X-Real-IP $remote_addr;
             proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         }

         location /oauth {
             proxy_pass http://hukumatportal:4000/oauth;
             proxy_set_header        Host $host;
             proxy_set_header        X-Real-IP $remote_addr;
             proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         }

}

    server {
    listen 443 ssl;
    server_name             participationportal.tjegov.softline.main;
    #ssl_certificate         /cert/tjegov.softline.main.crt;
    #ssl_certificate_key     /cert/tjegov.softline.main.key;


        location / {
            proxy_pass http://participationportal:4000;
        }
                location /builder {
             proxy_pass http://participationportal:4000/builder;
             proxy_set_header        Host $host;
             proxy_set_header        X-Real-IP $remote_addr;
             proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         }

         location /oauth {
             proxy_pass http://participationportal:4000/oauth;
             proxy_set_header        Host $host;
             proxy_set_header        X-Real-IP $remote_addr;
             proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
         }
    }
    server {
    listen 443 ssl;
    server_name             registries.tjegov.softline.main;
    #ssl_certificate         /cert/tjegov.softline.main.crt;
    #ssl_certificate_key     /cert/tjegov.softline.main.key;


        location / {
            proxy_pass http://ub-registries:8882;
        }
    }

    #server {
    #    listen 443 ssl;
    #    server_name             openid.tjegov.softline.main;
    #    ssl_certificate         /cert/tjegov.softline.main.crt;
    #    ssl_certificate_key     /cert/tjegov.softline.main.key;
    #
    #
    #    location / {
    #        proxy_pass http://openid:3000;
    #    }
    #}

    server {
        listen 443 ssl;
        server_name                 app.tjegov.softline.main;
    #    ssl_certificate             /cert/tjegov.softline.main.crt;
    #    ssl_certificate_key         /cert/tjegov.softline.main.key;

        location / {
            proxy_pass http://ub-app:8881;
        }

        location ~* ^/(openid|interaction)  {

                location ~ /openIDConnect {
                    proxy_pass              http://ub-app:8881;
                    proxy_set_header        Host $host;
                    proxy_set_header        X-Real-IP $remote_addr;
                    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                }

            rewrite                 /openid\/(.*) /$1 break;
            proxy_pass              http://openid:3000;
            proxy_redirect          off;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header        Host $host;
        }


        # location ~* ^/(modules|plugins|images|main.js|fonts|locales|icons) {
        #     proxy_pass http://portal:4000;
        # }
    }

    server {
        listen 80;
        server_name        redirect;
        return 301         https://$host:443$request_uri;
    }
}