# --- <FULL-QUALIFIED-SITE-NAME>
  
# ---
# see: https://www.collaboraoffice.com/code/nginx-reverse-proxy/
# ---

server {
    listen 80;
    listen [::]:80;
    server_name <FULL-QUALIFIED-SITE-NAME>;

    # Enforce HTTPS
    return 301 https://$server_name$request_uri;
}


server {
   listen 443 ssl;
   listen [::]:443 ssl;

   server_name <FULL-QUALIFIED-SITE-NAME>;

   root /var/www/<FULL-QUALIFIED-SITE-NAME>;

   ssl_certificate /var/lib/dehydrated/certs/<FULL-QUALIFIED-SITE-NAME>/fullchain.pem;
   ssl_certificate_key /var/lib/dehydrated/certs/<FULL-QUALIFIED-SITE-NAME>/privkey.pem;


   # Include location directive for Let's Encrypt ACME Challenge
   #
   # Needed for (automated) updating certificate
   #
   include snippets/letsencrypt-acme-challenge.conf;

   # set max upload size
   client_max_body_size 512M;
   fastcgi_buffers 64 4K;


   # static files
   location ^~ /browser {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Host $http_host;
   }


   # WOPI discovery URL
   location ^~ /hosting/discovery {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Host $http_host;
   }


   # Capabilities
   location ^~ /hosting/capabilities {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Host $http_host;
   }


   # main websocket
   location ~ ^/cool/(.*)/ws$ {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_set_header Host $http_host;
      proxy_read_timeout 36000s;
   }


   # download, presentation and image upload
   location ~ ^/(c|l)ool {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Host $http_host;
   }


   # Admin Console websocket
   location ^~ /cool/adminws {
      proxy_pass https://127.0.0.1:9980;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_set_header Host $http_host;
      proxy_read_timeout 36000s;
   }
}