events {
}

http {
    sendfile on;

    server {
        listen 80;
        root /www/data/;
        access_log /var/log/nginx/access.log;

        client_max_body_size ${FILE_SIZE_LIMIT};

        add_header X-Content-Type-Options    "nosniff" always;
        add_header Referrer-Policy           "no-referrer-when-downgrade" always;
        add_header Permissions-Policy        "interest-cohort=()" always;
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-Forwarded-Proto         "${dollar}scheme";
        add_header X-Forwarded-Host          "${dollar}host";
        add_header X-Forwarded-For           "${dollar}proxy_add_x_forwarded_for";
        add_header Host                      "${dollar}http_host";

        location / {
            proxy_pass http://web:3000/;
        }

        location /api/ {
            proxy_set_header X-Forwarded-For "${dollar}proxy_add_x_forwarded_for";
            proxy_set_header Host            "${dollar}http_host";
            proxy_pass http://api:8000/api/;
        }

        location /spaces/ {
            proxy_pass http://space:3000/spaces/;
        }
        
        location /god-mode/ {
            proxy_pass http://admin:3000/god-mode/;
        }

        location /auth/ {
            proxy_set_header X-Forwarded-For "${dollar}proxy_add_x_forwarded_for";
            proxy_set_header Host            "${dollar}http_host";
            proxy_pass http://api:8000/auth/;
        }

        location /${BUCKET_NAME}/ {
            proxy_pass http://plane-minio:9000/${BUCKET_NAME}/;
        }
    }
}