# Generated by Chef

server {
  server_name <%= @domain %>;
  listen <%= "#{node['openresty']['listen_ip']}:" if node['openresty']['listen_ip'] %>443 ssl http2;
  listen [::]:443 ssl http2;

  root /var/www/<%= @domain %>/public;

  access_log <%= node[:openresty][:log_dir] %>/<%= @domain %>.access.log;
  error_log <%= node[:openresty][:log_dir] %>/<%= @domain %>.error.log warn;

  gzip_static on;
  gzip_comp_level 5;

  add_header 'Access-Control-Allow-Origin' '*';

  ssl_certificate     <%= @ssl_cert %>;
  ssl_certificate_key <%= @ssl_key %>;

  location /.well-known/lnurlp/ {
    proxy_ssl_server_name on;
    rewrite /.well-known/lnurlp/([^/]+) /lnurlpay/$1@kosmos.org break;
    proxy_pass https://accounts.kosmos.org;
  }

  location /.well-known/keysend/ {
    proxy_ssl_server_name on;
    rewrite /.well-known/keysend/([^/]+) /keysend/$1@kosmos.org break;
    proxy_pass https://accounts.kosmos.org;
  }
}