user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {

    upstream FrontServer{
        server 172.17.0.1:3000;
        keepalive 32;
     }
    server {
        listen 80;
        listen [::]:80;

        server_name k8a509.p.ssafy.io;

        location /{
                proxy_pass http://FrontServer/;
        }

    }

server {
    server_name j8a502.p.ssafy.io;

        location /api{
                rewrite ^/api(.*)$ $1 break;
                proxy_pass http://172.17.0.1:8000;
            proxy_hide_header X-XSRF-Token;
            proxy_hide_header X-CSRF-Token;
proxy_set_header Host $host;
        proxy_connect_timeout 300;
        proxy_send_timeout 300;
        proxy_read_timeout 300;
        send_timeout 300;

 }
      location / {
                proxy_pass http://172.17.0.1:3000;

        proxy_connect_timeout 300;
        proxy_send_timeout 300;
        proxy_read_timeout 300;
        send_timeout 300;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;

}
    listen 443 ssl; # managed by Certbot
    ssl_certificate fullchain.pem; # managed by Certbot
    ssl_certificate_key privkey.pem; # managed by Certbot

}

    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    #security
    server_tokens off;
}