user             nginx;
worker_processes 1;

events {
  worker_connections 1024;
}

http {
  include      /etc/nginx/mime.types;
  default_type application/octet-stream;

  gzip         on;
  gzip_types   application/xml application/json application/x-javascript text/css text/plain;
  gzip_proxied no-cache no-store private expired auth;

  server_tokens off;

  server {
    listen 80;
    listen [::]:80;

    server_name _;

    return 301 https://$host$request_uri;
  }

  server {
    listen 443      ssl http2;
    listen [::]:443 ssl http2;

    server_name _;

    ssl_certificate     /run/secrets/titleproject.space-20211130.crt;
    ssl_certificate_key /run/secrets/titleproject.space-20211130.key;

    add_header Strict-Transport-Security "max-age=15768000" always;
    add_header X-Content-Type-Options    nosniff;
    add_header X-XSS-Protection          "1; mode=block";

    location / {
        proxy_pass http://unleash:4242/;
    }
  }
}