# Example Homebranch Web nginx configuration for a TLS-terminating proxy
server {
    listen       80;
    server_name  homebranch.example.com;

    root   /var/www/homebranch;
    index  index.html;

    location / {
        try_files $uri $uri/ /index.html;
    }

    client_max_body_size 200m;

    # SSE endpoints — disable buffering so events are delivered immediately
    location ~ ^/api/(jobs/stream|library/events)$ {
        proxy_pass http://127.0.0.1:8080/$1;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;

        proxy_http_version 1.1;
        proxy_set_header Connection        '';
        proxy_buffering                    off;
        proxy_cache                        off;
        proxy_read_timeout                 3600s;
        add_header X-Accel-Buffering       no;
    }

    location /api/ {
        proxy_pass http://127.0.0.1:8080/;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
        proxy_set_header X-Forwarded-Prefix /api;
    }

    location /auth/ {
        proxy_pass http://127.0.0.1:3000/;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
    }
}