configs/ligalytics/proxy/etc/nginx/sites-available/bernie.conf

server {
	# server_name compute.asolvo.de;
	server_name optimization.ligalytics.com;
	location = /robots.txt {
		add_header Content-Type text/plain;
		return 200 "User-agent: *\nDisallow: /\n";
	}



	real_ip_recursive on;
	real_ip_header CF-Connecting-IP;
	set_real_ip_from 173.245.48.0/20;
	set_real_ip_from 103.21.244.0/22;
	set_real_ip_from 103.22.200.0/22;
	set_real_ip_from 103.31.4.0/22;
	set_real_ip_from 141.101.64.0/18;
	set_real_ip_from 108.162.192.0/18;
	set_real_ip_from 190.93.240.0/20;
	set_real_ip_from 188.114.96.0/20;
	set_real_ip_from 197.234.240.0/22;
	set_real_ip_from 198.41.128.0/17;
	set_real_ip_from 162.158.0.0/15;
	set_real_ip_from 104.16.0.0/13;
	set_real_ip_from 104.24.0.0/14;
	set_real_ip_from 172.64.0.0/13;
	set_real_ip_from 131.0.72.0/22;
	set_real_ip_from 2400:cb00::/32;
	set_real_ip_from 2606:4700::/32;
	set_real_ip_from 2803:f800::/32;
	set_real_ip_from 2405:b500::/32;
	set_real_ip_from 2405:8100::/32;
	set_real_ip_from 2a06:98c0::/29;
	set_real_ip_from 2c0f:f248::/32;



	#SSL configuration
	listen 443 ssl http2;
	listen [::]:443 ssl http2;
	include snippets/ssl-params.conf;
	proxy_set_header X-Forwarded-For $remote_addr;
	proxy_set_header X-Real-IP $remote_addr;
	fastcgi_buffers 16 32k;
	fastcgi_buffer_size 64k;
	client_max_body_size 48M;
	client_body_buffer_size 128k;
	client_header_buffer_size 5120k;
	large_client_header_buffers 32 5120k;
	proxy_max_temp_file_size 0;
	proxy_buffering off;
	location / {
		proxy_pass http://bernie/;
		proxy_set_header HOST optimization.ligalytics.com;
		proxy_set_header X-Forwarded-For $remote_addr;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_intercept_errors on;
		proxy_connect_timeout 5;
		proxy_read_timeout 240;
		error_page 404 502 503 504 = @fallback;
	}
	location /flower/ {
		#rewrite ^/flower/(.*)$ /$1 break;
		proxy_pass http://bernie:5555;
		proxy_set_header Host $host;
		proxy_redirect off;
	}
	location @fallback {
		root /var/www/html;
		index maintenance.html;
	}
ssl_certificate /etc/letsencrypt/live/optimization.ligalytics.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/optimization.ligalytics.com/privkey.pem; # managed by Certbot
}

server {
	server_name team.ligalytics.com;
	listen 443;
	#rewrite ^/singleteam(.*)$ $1 last;
	location = /robots.txt {
		add_header Content-Type text/plain;
		return 200 "User-agent: *\nDisallow: /\n";
	}
	error_page 400 401 402 403 404 500 501 502 503 504 /maintenance.html;
	location /maintenance.html {
		root /var/www/html;
	}
	location / {
		proxy_pass http://bernie/;
		#rewrite ^/singleteam(.*)$ $1 break;
		proxy_intercept_errors on;
		proxy_set_header Host team.ligalytics.com;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_connect_timeout 5;
		proxy_read_timeout 240;
		#root /var/www/html;
		#index maintenance.html;
	}

	location /urc/ {
		rewrite ^/urc(/.*)$ $1 break;
		rewrite ^/urc$ / break;
		proxy_pass http://192.168.178.107:3000;
		proxy_http_version 1.1;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
	}

	location = /urc {
		rewrite ^ /urc/ permanent;
	}



	ssl_certificate /etc/letsencrypt/live/team.ligalytics.com/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/team.ligalytics.com/privkey.pem; # managed by Certbot
}


server {
	server_name club.ligalytics.com;
	error_page 400 401 402 403 404 500 501 502 503 504 /maintenance.html;
	location /maintenance.html {
		root /var/www/html;
	}
	listen 443;
	location = /robots.txt {
		add_header Content-Type text/plain;
		return 200 "User-agent: *\nDisallow: /\n";
	}
	location / {
		proxy_pass http://bernie/;
		proxy_intercept_errors on;
		proxy_set_header HOST club.ligalytics.com;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_connect_timeout 5;
		proxy_read_timeout 240;
		#root /var/www/html;
		#index maintenance.html;
	}
	ssl_certificate /etc/letsencrypt/live/club.ligalytics.com/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/club.ligalytics.com/privkey.pem; # managed by Certbot
}



server {
	server_name login.ligalytics.com;
	error_page 400 401 402 403 404 500 501 502 503 504 /maintenance.html;
	location /maintenance.html {
		root /var/www/html;
	}
	listen 443;
	location = /robots.txt {
		add_header Content-Type text/plain;
		return 200 "User-agent: *\nDisallow: /\n";
	}
	location / {
		proxy_pass http://bernie/;
		proxy_intercept_errors on;
		proxy_set_header HOST login.ligalytics.com;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_connect_timeout 5;
		proxy_read_timeout 240;
		#root /var/www/html;
		#index maintenance.html;
	}

    ssl_certificate /etc/letsencrypt/live/login.ligalytics.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/login.ligalytics.com/privkey.pem; # managed by Certbot
}