##
# Default server configuration
##

server {
    listen 80 default_server;
    listen [::]:80 default_server;

    server_name _;

    root /var/www/html;
    index index.html index.htm index.nginx-debian.html;

    # --------------------------------------------------
    # OpenTimestamps API reverse proxy
    # /ots/*  -->  http://127.0.0.1:5000/*
    # --------------------------------------------------

    location = /ots {
        return 301 /ots/;
    }

    location /ots/ {
        rewrite ^/ots/(.*)$ /$1 break;

        proxy_pass http://127.0.0.1:5000;
        proxy_http_version 1.1;

        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # Bearer token (API auth)
        proxy_set_header Authorization $http_authorization;

        proxy_connect_timeout 10s;
        proxy_send_timeout    30s;
        proxy_read_timeout    30s;
    }

    # --------------------------------------------------
    # Default static site
    # --------------------------------------------------

    location / {
        try_files $uri $uri/ =404;
    }

    # PHP (disabilitato, lasciato come riferimento)
    #
    #location ~ \.php$ {
    #    include snippets/fastcgi-php.conf;
    #    fastcgi_pass unix:/run/php/php8.2-fpm.sock;
    #}

    # Sicurezza .htaccess
    #
    #location ~ /\.ht {
    #    deny all;
    #}
}