user nginx;
worker_processes auto;

events {

}

http {
    resolver 127.0.0.11 ipv6=off valid=30s;

    client_max_body_size 10M;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log warn;

    gzip on;
    gzip_comp_level 6;
    gzip_vary on;
    gzip_min_length 256;
    gzip_types text/plain text/css application/json application/javascript application/xml image/svg+xml application/font-woff2;


    server {
        listen 443 ssl;
        
        server_name ${SERVER_NAME};
        ssl_certificate /etc/letsencrypt/live/${SERVER_NAME}/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/${SERVER_NAME}/privkey.pem;

        location / {
            set $upstream http://gitea:3000;
            proxy_pass $upstream;

            proxy_set_header x-real-ip $remote_addr;
            proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;

            proxy_http_version 1.1;
            proxy_set_header Connection 'upgrade';
        }
    }
}