map $host $target_port {
    default                          80;
    ui.host.jeyerp.az                5000;
    jeydev-code.host.jeyerp.az       1710;
    erpnext-ali-code.host.jeyerp.az  1710;
    git.host.jeyerp.az               3000;
    dev.host.jeyerp.az               1710;
    cicd.host.jeyerp.az              8000;
}

map $host $container {
    erpnext-ali-code.host.jeyerp.az  erpnext-ali;
    jeydev-code.host.jeyerp.az       jeydev;
    git.host.jeyerp.az               jeyerp-git;
    dev.host.jeyerp.az               jeyerp-dev;
    cicd.host.jeyerp.az              jeyerp-cicd;
    ~^([^.]+)\.host\.jeyerp\.az$     $1;
    default                          "";
}

server {
    listen 80;
    server_name *.host.jeyerp.az;

    resolver 10.220.187.1 valid=10s;

    location /api/ {
        proxy_pass http://$container.incus:$target_port;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl;
    server_name *.host.jeyerp.az;

    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
    ssl_client_certificate /etc/nginx/ca/ca.crt;
    ssl_verify_client optional;
    ssl_verify_depth 1;

    client_max_body_size 50m;

    resolver 10.220.187.1 valid=10s;

    location / {
        proxy_pass http://$container.incus:$target_port;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade           $http_upgrade;
        proxy_set_header Connection        "upgrade";
        proxy_read_timeout 3600s;
        proxy_send_timeout 3600s;

        proxy_redirect off;
    }
}

server {
    listen 443 ssl;
    server_name monitoring.host.jeyerp.az;

    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
    ssl_client_certificate /etc/nginx/ca/ca.crt;
    ssl_verify_client off;

    location / {
        proxy_pass http://192.168.1.1:19999;
        proxy_set_header Host $host;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
    }
}