# Map hostnames to ports
map $host $target_port {
    default                          80;
    ui.host.jeyerp.az                5000;
    jeydev-code.host.jeyerp.az       1710;
    erpnext-ali-code.host.jeyerp.az  1710;
    git.host.jeyerp.az               3000;
    dev.host.jeyerp.az               8000;
    cicd.host.jeyerp.az              8000;
}

# Map hosts that require WebSocket upgrade headers
map $host $upgrade_header {
    default                         "";
    jeydev-code.host.jeyerp.az      $http_upgrade;
    erpnext-ali-code.host.jeyerp.az $http_upgrade;
}

map $host $connection_header {
    default                         "";
    jeydev-code.host.jeyerp.az      "upgrade";
    erpnext-ali-code.host.jeyerp.az "upgrade";
}

# Map hostnames to container names (special cases)
map $host $container {
    erpnext-ali-code.host.jeyerp.az  erpnext-ali;
    jeydev-code.host.jeyerp.az       jeydev;
    git.host.jeyerp.az               jeyerp-git;
    dev.host.jeyerp.az               jeyerp-dev;
    cicd.host.jeyerp.az              jeyerp-cicd;
        ~^(.+)\.host\.jeyerp\.az$        $1;
    default                          "";
}

server {
    listen 443 ssl;
    server_name *.host.jeyerp.az;

    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;

    resolver 10.220.187.1 valid=10s;

    location / {
        proxy_pass http://$container.incus:$target_port$request_uri;

        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_http_version 1.1;
        proxy_set_header Upgrade           $upgrade_header;
        proxy_set_header Connection        $connection_header;

        proxy_redirect off;
    }
}

server {
    listen 443 ssl;
        server_name monitoring.host.jeyerp.az;

    ssl_certificate     /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;

    location / {
        proxy_pass http://192.168.1.1:19999;

        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_http_version 1.1;
        proxy_redirect off;
    }
}