resolver 127.0.0.11 valid=10s;

server {
    listen 80;
    server_name localhost;
    location /health {
        access_log off;
        return 200 "healthy\n";
    }
}

proxy_connect_timeout 2s;
proxy_read_timeout 10s;
proxy_send_timeout 10s;

proxy_next_upstream error timeout http_502 http_503 http_504;

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

########################################
# DEFAULT 443
########################################

server {
    listen 443 ssl default_server;
    server_name _;

    ssl_certificate     /etc/ssl/certs/linksun/cert.pem;
    ssl_certificate_key /etc/ssl/private/linksun/privkey.pem;

    error_page 404 /__default_unconfigured.html;

    location = /__default_unconfigured.html {
        root /usr/share/nginx/html;
        internal;
    }

    location / {
        return 404;
    }
}

########################################
# LINKSUN - OFICIAL
########################################

server {
    listen 443 ssl;
    server_name oficial.linksun.inf.br;

    ssl_certificate     /etc/ssl/certs/linksun/cert.pem;
    ssl_certificate_key /etc/ssl/private/linksun/privkey.pem;

    set $lk_ofc_front linksun-oficial-front;

    location / {
        proxy_pass http://$lk_ofc_front:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}