# vi:syntax=nginx

# These are some "magic" Nginx configuration options that aid in making
# WebSockets work properly with Passenger Standalone. Please learn more
# at http://nginx.org/en/docs/http/websocket.html
map $http_upgrade $connection_upgrade {
  default upgrade;
  '' close;
}

server {
  listen      443;
  server_name ${SERVER_NAME};

  # Increase max upload
  client_max_body_size 500M;

  # ---------- SSL ----------
  # from https://github.com/MarvAmBass/docker-nginx-registry-proxy/blob/master/docker-registry.conf
  ssl on;
  ssl_certificate external/cert.pem;
  ssl_certificate_key external/key.pem;

  # set HSTS-Header because we only allow https traffic
  add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

  # ---------- PUBLIC FILES ----------
  root /public;

  location ${CARRIERWAVE_PUBLIC_UPLOAD_DIR_AND_URL} {
    alias /carrierwave_public_upload_dir;
  }

  location ${CARRIERWAVE_CACHE_DIR_AND_URL} {
    alias /carrierwave_cache_dir;
  }

  # TODO https://gist.github.com/ebeigarts/9410688
  # location ${CARRIERWAVE_PRIVATE_UPLOAD_DIR_AND_URL} {
  #   internal;
  #   alias /carrierwave_private_upload_dir;
  # }

  location ${FILEMANAGER_STATIC_DIR_AND_URL} {
    alias /filemanager_upload_dir;
  }

  # ---------- BACKEND ----------
  location / {
    proxy_pass     ${BACKEND_URL};
    proxy_http_version 1.1;

    proxy_set_header Host       $http_host;
    proxy_set_header Upgrade    $http_upgrade;
    proxy_set_header Connection $connection_upgrade;

    proxy_set_header X-Real-IP  $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Ssl on; # Optional
    proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header X-Forwarded-Host $host;

    proxy_buffering  off;
  }

  # ---------- FILEMANAGER ----------
  # redirect to filemanager and prevent cors issue
  location /responsivefilemanager/ {
    proxy_pass       ${FILEMANAGER_URL}/;
    proxy_http_version 1.1;

    proxy_set_header Host      $host;
    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Ssl on; # Optional
    proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header X-Forwarded-Host $host;
  }

  # deny access to .htaccess files, for filemanager
  location ~ /\.ht {
    deny  all;
  }
}

server {
    listen 80;

    # Increase max upload
    client_max_body_size 500M;

    # Redirect http to https
    return 301 https://$host$request_uri;
}