#### for renew Cetbot ####
# server {
#     listen 10001;
#     server_name vivabm.com;
#     charset utf-8;
#     root "/Users/vivakr/WebServer/com.vivabm/_";
#     index index.html;
# }

server {
    listen 10001;
    server_name vivabm.com;
    return 301 https://vivabm.com$request_uri;
}

server {
    listen 443 ssl;
    server_name vivabm.com;

    ssl_certificate /etc/letsencrypt/live/vivabm.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/vivabm.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    ssl_stapling on;
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;

    access_log "/opt/homebrew/var/log/nginx/vivabm.com.access.log";
    error_log "/opt/homebrew/var/log/nginx/vivabm.com.error.log";

    location / {
        proxy_pass http://localhost:47960; # Dokcer Container 프록시
        # proxy_pass http://localhost:3000; # Next.js 로컬 개발 서버로 프록시
        proxy_http_version 1.1; # WebSocket 지원을 위해 추가
        proxy_set_header Upgrade $http_upgrade; # WebSocket 업그레이드 헤더
        proxy_set_header Connection "upgrade"; # WebSocket 연결 유지
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# nginx.conf
#user  nobody;
worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    include       proxy.conf;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  65;
    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;

    # 보안 처리 파트
    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";

    error_log /opt/homebrew/var/log/nginx/error.log;
    access_log /opt/homebrew/var/log/nginx/access.log;

    server {
        listen       10001;
        server_name  localhost;
        charset utf-8;

        # ? /opt/homebrew/var/www
        location / {
            root   html;
            index  index.html index.htm;
        }
    }

    include writer.or.kr/*;
    include buddham.co.kr/*;
    include text.or.kr/*;
    include kimbumjun.com/*;
    include kimbumjun.co.kr/*;
    include vivakr.com/*;
    include vivabm.com/*;
}