# Generated by Chef
upstream _rs_discourse {
  <% @upstream_ip_addresses.each do |upstream_ip_address| -%>
  server   <%= upstream_ip_address %>:<%= @upstream_port %>;
  <% end -%>
}

server {
  server_name <%= @server_name %>;
  listen <%= "#{node['openresty']['listen_ip']}:" if node['openresty']['listen_ip'] %>443 ssl http2;
  listen [::]:443 ssl http2;

  ssl_certificate     <%= @ssl_cert %>;
  ssl_certificate_key <%= @ssl_key %>;

  add_header Strict-Transport-Security "max-age=31536000";

  # Send real IP to the Docker container
  set_real_ip_from 127.0.0.1;
  real_ip_header X-Forwarded-For;

  client_max_body_size 20M;

  location / {
    # Increase number of buffers. Default is 8
    proxy_buffers 1024 8k;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_pass http://_rs_discourse;
    proxy_http_version 1.1;
  }
}