user user;

error_log /tmp/error.log warn;
pid /tmp/nginx.pid;

worker_processes auto;

events {
    worker_connections 1024;
}

http {

    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    keepalive_timeout 65;

    client_max_body_size 800m;

    access_log /tmp/nginx-access.log;

    # ================================
    # HF SAFE TEMP PATHS
    # ================================
    client_body_temp_path /tmp/nginx-body;
    proxy_temp_path       /tmp/nginx-proxy;
    fastcgi_temp_path     /tmp/nginx-fastcgi;
    uwsgi_temp_path       /tmp/nginx-uwsgi;
    scgi_temp_path        /tmp/nginx-scgi;

    # ================================
    # WEBSOCKET SUPPORT
    # ================================
    map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
    }

    server {

        listen 7860;
        server_name _;

        # ================================
        # AUTH ONLY FOR VS CODE AREA
        # ================================
        location /vscode/ {

            auth_basic "Restricted";
            auth_basic_user_file /home/user/app/ngpasswd;

            proxy_pass http://127.0.0.1:5050/;

            proxy_http_version 1.1;

            proxy_set_header Host $host;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;

            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;

            proxy_read_timeout 86400;
            proxy_send_timeout 86400;

            proxy_cache_bypass $http_upgrade;
        }

        # ================================
        # MAIN APP (OPEN WITHOUT AUTH)
        # ================================
        location / {

            proxy_pass http://127.0.0.1:5050/;

            proxy_http_version 1.1;

            proxy_set_header Host $host;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;

            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;

            proxy_read_timeout 86400;
            proxy_send_timeout 86400;

            proxy_cache_bypass $http_upgrade;
        }

        # ================================
        # ERROR HANDLING
        # ================================
        error_page 502 = /;
    }
}