upstream frameflow_api {
  server api:8787;
  keepalive 32;
}

server {
  listen 80 default_server;
  server_name ${APP_HOST};
  root /usr/share/nginx/html;
  index index.html;
  client_max_body_size ${MAX_UPLOAD_SIZE};

  add_header X-Content-Type-Options nosniff always;
  add_header X-Frame-Options DENY always;
  add_header Referrer-Policy strict-origin-when-cross-origin always;
  add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;

  location /api/ {
    proxy_pass http://frameflow_api;
    proxy_http_version 1.1;
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Connection "";
  }

  location /health/ {
    proxy_pass http://frameflow_api;
    proxy_http_version 1.1;
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  location = /metrics {
    return 404;
  }

  location ~* \.(?:css|js|jpg|jpeg|png|webp|avif|svg|ico|woff2?)$ {
    try_files $uri =404;
    expires 7d;
    add_header Cache-Control "public, max-age=604800, immutable";
  }

  location / {
    try_files $uri $uri/ /index.html;
    add_header Cache-Control "no-cache";
  }
}

server {
  listen 80;
  server_name ${MEDIA_HOST};
  client_max_body_size ${MAX_UPLOAD_SIZE};

  location = /minio/v2/metrics {
    return 404;
  }

  location ^~ /minio/v2/metrics/ {
    return 404;
  }

  location = /minio/v3/metrics {
    return 404;
  }

  location ^~ /minio/v3/metrics/ {
    return 404;
  }

  location / {
    proxy_pass http://minio:9000;
    proxy_http_version 1.1;
    proxy_request_buffering off;
    proxy_buffering off;
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }
}