vhosts

upstream dev-example-master.domain.com-ingress-example.domain.com-service1 {


        server 10.40.163.33:80;
        server 10.40.164.2:80;
        server 10.40.165.29:80;

}
upstream dev-example-master.domain.com-ingress-example.domain.com-service2 {


        server 10.40.163.24:8080;
        server 10.40.163.25:8080;
        server 10.40.164.10:8080;
        server 10.40.165.18:8080;
        server 10.40.165.5:8080;

}
upstream dev-example-master.domain.com-ingress-example.domain.com-service3 {


        server 10.40.163.22:80;
        server 10.40.163.28:80;
        server 10.40.163.29:80;
        server 10.40.163.36:80;
        server 10.40.163.37:80;

}


server {

        listen 80;

        listen 443 ssl http2;
        ssl_certificate /etc/nginx/secrets/dev-example-https-domain;
        ssl_certificate_key /etc/nginx/secrets/dev-example-https-domain;


        set_real_ip_from 103.21.244.0/22;
        set_real_ip_from 103.22.200.0/22;
        set_real_ip_from 103.31.4.0/22;
        set_real_ip_from 104.16.0.0/12;
        set_real_ip_from 108.162.192.0/18;
        set_real_ip_from 131.0.72.0/22;
        set_real_ip_from 141.101.64.0/18;
        set_real_ip_from 162.158.0.0/15;
        set_real_ip_from 172.64.0.0/13;
        set_real_ip_from 173.245.48.0/20;
        set_real_ip_from 188.114.96.0/20;
        set_real_ip_from 190.93.240.0/20;
        set_real_ip_from 197.234.240.0/22;
        set_real_ip_from 198.41.128.0/17;
        real_ip_header CF-Connecting-IP;


        server_tokens off;

        server_name example.com;




        if ($scheme = http) {
                return 301 https://$host:443$request_uri;
        }


        location /captcha {
                proxy_http_version 1.1;


                proxy_redirect off;
                proxy_intercept_errors on;
                proxy_set_header Connection "";
                proxy_set_header X-CF-Visitor $http_cf_visitor;


                proxy_connect_timeout 60s;
                proxy_read_timeout 20m;
                client_max_body_size 100m;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $host;
                proxy_set_header X-Forwarded-Port $server_port;
                proxy_set_header X-Forwarded-Proto $scheme;

                proxy_buffering on;

                proxy_pass http://dev-example-master.domain.com-ingress-example.domain.com-service1;

        }
        location /api-gateway/ {
                proxy_http_version 1.1;

                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $connection_upgrade;

                proxy_redirect off;
                proxy_intercept_errors on;
                proxy_set_header Connection "";
                proxy_set_header X-CF-Visitor $http_cf_visitor;


                proxy_connect_timeout 60s;
                proxy_read_timeout 20m;
                client_max_body_size 100m;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $host;
                proxy_set_header X-Forwarded-Port $server_port;
                proxy_set_header X-Forwarded-Proto $scheme;

                proxy_buffering on;

                proxy_pass http://dev-example-master.domain.com-ingress-example.domain.com-service2/;

        }
        location / {
                proxy_http_version 1.1;


                proxy_redirect off;
                proxy_intercept_errors on;
                proxy_set_header Connection "";
                proxy_set_header X-CF-Visitor $http_cf_visitor;


                proxy_connect_timeout 60s;
                proxy_read_timeout 20m;
                client_max_body_size 100m;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $host;
                proxy_set_header X-Forwarded-Port $server_port;
                proxy_set_header X-Forwarded-Proto $scheme;

                proxy_buffering on;

                proxy_pass http://dev-example-master.domain.com-ingress-example.domain.com-service3;

        }
}