#/root/docker/Webproxy/Data/nginx/service.conf

map $http_upgrade $connection_upgrade {
  default upgrade;
  ''      close;
}

server {
  listen 80;
  server_name service.focus-on-it.net;

  location /.well-known/acme-challenge/ { root /var/www/certbot; }
  location / { return 301 https://$host$request_uri; }
}

server {
  listen 443 ssl;
  server_name service.focus-on-it.net;

  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;

  location / {
    return 200 "service endpoint\n";
  }
}

server {
  listen 80;
  server_name dokuwiki.focus-on-it.net;
  location /.well-known/acme-challenge/ { root /var/www/certbot; }
  location / { return 301 https://$host$request_uri; }
}

server {
  listen 443 ssl;
  server_name dokuwiki.focus-on-it.net;
  resolver 127.0.0.11 valid=30s ipv6=off;
  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;

  location / {
    set $dokuwiki_upstream dokuwiki:8080;
    proxy_pass http://$dokuwiki_upstream;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Port 443;
  }
}
server {
  listen 80;
  server_name guacamole.focus-on-it.net;

  location /.well-known/acme-challenge/ { root /var/www/certbot; }
  location / { return 301 https://$host$request_uri; }
}

server {
  listen 443 ssl;
  server_name guacamole.focus-on-it.net;

  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;

  # optional sinnvoll
  client_max_body_size 50m;

  # Guacamole läuft standardmäßig unter /guacamole/
  location / {
    return 302 /guacamole/;
  }

  location /guacamole/ {
    proxy_pass http://guacamole:8080/guacamole/;
    proxy_http_version 1.1;

    proxy_set_header Host              $host;
    proxy_set_header X-Real-IP         $remote_addr;
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Port  443;

    # WebSocket für Guacamole Tunnel
    proxy_set_header Upgrade           $http_upgrade;
    proxy_set_header Connection        $connection_upgrade;

    proxy_buffering off;
  }
}
server {
    listen 80;
    server_name drawio.focus-on-it.net;

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl;
    server_name drawio.focus-on-it.net;

    ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;

    client_max_body_size 50m;

    location / {
	auth_basic "Restricted";
        auth_basic_user_file /etc/nginx/auth/.htpasswd;    
        proxy_pass http://drawio:8080;

        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port 443;

        proxy_read_timeout 300;
        proxy_send_timeout 300;
    }
}
server {
    listen 80;
    server_name nextcloud.focus-on-it.net;

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl;
    server_name nextcloud.focus-on-it.net;

    resolver 127.0.0.11 valid=30s ipv6=off;

    ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;

    client_max_body_size 10G;
    proxy_read_timeout 3600;
    proxy_send_timeout 3600;

    location / {
        set $nextcloud_upstream nextcloud-nginx:80;
        proxy_pass http://$nextcloud_upstream;

        proxy_http_version 1.1;
        proxy_request_buffering off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port 443;
    }
}