# SiMS HQ console — host nginx vhost. Install as:
#   sudo cp deploy/nginx-hq.conf /etc/nginx/conf.d/sims.hq.conf
#   sudo nginx -t && sudo systemctl reload nginx
# Reuses the existing *.simssoftware.in wildcard cert. Proxies to the HQ container,
# which publishes on 127.0.0.1:5182. The public /share/:token links go through here too
# (intended: token-guarded, rate-limited, revocable).
server {
    listen 80;
    server_name hq.simssoftware.in;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name hq.simssoftware.in;

    ssl_certificate     /etc/ssl/sims/sims.crt;
    ssl_certificate_key /etc/ssl/sims/sims.key;

    location / {
        proxy_pass http://127.0.0.1:5182;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}