server {
    listen 80;
    listen [::]:80;

    server_tokens off;
    server_name explorer.temtum.com;

    return 301 https://$server_name$request_uri;
}

upstream explorer {
        server 159.89.101.35;
        server 209.97.181.36;
    server 188.166.1.234;
}

server {
    listen 443 ssl;

    ssl on;
    ssl_certificate /etc/nginx/ssl/certificate.pem;
    ssl_certificate_key /etc/nginx/ssl/private.key;
    ssl_protocols TLSv1.1 TLSv1.2;

    server_tokens off;
    client_max_body_size 10m;

    server_name explorer.temtum.com;

    root /home/explorer/dist;
    index index.html;

    location /api {
        proxy_pass http://explorer;
    }

    location / {
        try_files $uri $uri/ @rewrites;
    }

    location @rewrites {
        rewrite ^(.+)$ /index.html last;
    }

    location /apple-app-site-association {
        auth_basic off;
        default_type application/pkcs7-mime;
    }

    location /assetlinks.json {
        auth_basic off;
                default_type application/pkcs7-mime;
        }

    location /.well-known/assetlinks.json {
        auth_basic off;
        default_type application/pkcs7-mime;
        }

    location ~* \.(?:ico|css|js|gif|jpe?g|png)$ {
        auth_basic off;
        expires max;
        add_header Pragma public;
        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
    }
}