apiVersion: v1
kind: ConfigMap
metadata:
  name: lemmy-nginx-config
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: lemmy-proxy
    app.kubernetes.io/managed-by: provisioning
data:
  nginx.conf: |
    worker_processes 1;
    events { worker_connections 1024; }
    http {
      upstream lemmy_backend {
        server lemmy-backend.{{ taskserv.namespace }}.svc.libre-wuji.local:8536;
      }
      upstream lemmy_ui {
        server lemmy-ui.{{ taskserv.namespace }}.svc.libre-wuji.local:1234;
      }
      server {
        listen 80;
        server_name {{ taskserv.domain }};
        client_max_body_size 20M;
        add_header X-Frame-Options SAMEORIGIN;
        add_header X-Content-Type-Options nosniff;
        location /api/ { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location /pictrs/ { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location /feeds/ { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location /nodeinfo { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location /.well-known/ { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location /inbox { proxy_pass http://lemmy_backend; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; }
        location / { proxy_pass http://lemmy_ui; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; }
      }
    }