# FE Gentoo — notify.f0xx.org (broadcast public landing pages)
# Requires upstream ac_be_backend from ac-platform-edge/fe/ac-fe-upstream.conf
# BE: cast01–03 nginx server_name notify.f0xx.org → /var/www/ac/broadcast/public

server {
	listen 80;
	server_name notify.f0xx.org;

	location ^~ /.well-known/acme-challenge/ {
		root /var/www/letsencrypt;
		allow all;
	}

	return 301 https://$host$request_uri;
}

server {
	listen 443 ssl http2;
	server_name notify.f0xx.org;

	ssl_certificate     /etc/letsencrypt/live/notify.f0xx.org/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/notify.f0xx.org/privkey.pem;

	access_log /var/log/nginx/notify.f0xx.org.access_log main;
	error_log /var/log/nginx/notify.f0xx.org.error_log info;

	location / {
		proxy_pass http://ac_be_backend;
		proxy_http_version 1.1;
		proxy_set_header Host              $host;
		proxy_set_header X-Real-IP         $remote_addr;
		proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_connect_timeout 120s;
		proxy_send_timeout 120s;
		proxy_read_timeout 180s;
		proxy_buffers 16 16m;
		proxy_buffer_size 16m;
		client_body_buffer_size 16m;
		client_max_body_size 16m;
		proxy_buffering off;
	}
}