http {
        upstream api_node {
                server 127.0.0.1:9090;
                server 127.0.0.1:9091;
        }

        server {
                server_name earthshare.network;
                location /wsapi/ {
                        access_log /root/ws_access.log;
                        proxy_pass http://api_node;
                        proxy_set_header X-Real-IP $remote_addr;
                        proxy_set_header Host $host;
                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                        proxy_connect_timeout 2;
                        proxy_http_version 1.1;
                        proxy_set_header Upgrade $http_upgrade;
                        proxy_set_header Connection "upgrade";
                }

                location / {
                        proxy_set_header        X-Real-IP       $remote_addr;
                        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                        proxy_pass http://localhost:8080;
                }

                tcp_nopush on;
                tcp_nodelay on;
                listen 443 ssl; # managed by Certbot
                ssl_certificate /etc/letsencrypt/live/earthshare.network/fullchain.pem; # managed by Certbot
                ssl_certificate_key /etc/letsencrypt/live/earthshare.network/privkey.pem; # managed by Certbot
                include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
                ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
        }

        server {
                if ($host = earthshare.network) {
                        return 301 https://$host$request_uri;
                } # managed by Certbot

                listen 80 default_server;
                server_name earthshare.network;
                return 404; # managed by Certbot
        }
}