From 821224ddf43dd0072d346ca25ffe75c2e7339c8b Mon Sep 17 00:00:00 2001
From: js <ibo131205@gmail.com>
Date: Wed, 17 Sep 2025 17:32:04 +0000
Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=B1=D0=B0=D0=B2=D0=B8=D1=82?=
 =?UTF-8?q?=D1=8C=20default.conf?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 default.conf | 79 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)
 create mode 100644 default.conf

diff --git a/default.conf b/default.conf
new file mode 100644
index 0000000..00cbe9b
--- /dev/null
+++ b/default.conf
@@ -0,0 +1,79 @@
+# Map hostnames to ports
+map $host $target_port {
+    default                          80;
+    ui.host.jeyerp.az                5000;
+    jeydev-code.host.jeyerp.az       1710;
+    erpnext-ali-code.host.jeyerp.az  1710;
+    git.host.jeyerp.az               3000;
+    dev.host.jeyerp.az               8000;
+    cicd.host.jeyerp.az              8000;
+}
+
+# Map hosts that require WebSocket upgrade headers
+map $host $upgrade_header {
+    default                         "";
+    jeydev-code.host.jeyerp.az      $http_upgrade;
+    erpnext-ali-code.host.jeyerp.az $http_upgrade;
+}
+
+map $host $connection_header {
+    default                         "";
+    jeydev-code.host.jeyerp.az      "upgrade";
+    erpnext-ali-code.host.jeyerp.az "upgrade";
+}
+
+# Map hostnames to container names (special cases)
+map $host $container {
+    erpnext-ali-code.host.jeyerp.az  erpnext-ali;
+    jeydev-code.host.jeyerp.az       jeydev;
+    git.host.jeyerp.az               jeyerp-git;
+    dev.host.jeyerp.az               jeyerp-dev;
+    cicd.host.jeyerp.az              jeyerp-cicd;
+        ~^(.+)\.host\.jeyerp\.az$        $1;
+    default                          "";
+}
+
+server {
+    listen 443 ssl;
+    server_name *.host.jeyerp.az;
+
+    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
+
+    resolver 10.220.187.1 valid=10s;
+
+    location / {
+        proxy_pass http://$container.incus:$target_port$request_uri;
+
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade           $upgrade_header;
+        proxy_set_header Connection        $connection_header;
+
+        proxy_redirect off;
+    }
+}
+
+server {
+    listen 443 ssl;
+        server_name monitoring.host.jeyerp.az;
+
+    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
+
+    location / {
+        proxy_pass http://192.168.1.1:19999;
+
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_http_version 1.1;
+        proxy_redirect off;
+    }
+}
\ No newline at end of file