{{ ansible_managed | comment }}

# From https://git.shivering-isles.com/w4tsn/infrastructure/-/blob/2d8d03a025b833e11533fa8610cc77cff7a59bb9/roles/matrix/templates/delegate-nginx.conf.j2

# Infrastructure
# Ansible instructions to deploy the infrastructure
# Copyright (C) 2019-2020  Alexander (w4tsn) Wellbrock
# Copyright (C) 2020       Saibotk
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

worker_processes 1;

error_log stderr;

pid /tmp/nginx.pid;

events {
	worker_connections 1024;
}

http {
  include           /etc/nginx/mime.types;
  default_type      application/octet-stream;

  access_log off;

  # Turn off the bloody buffering to temp files
  proxy_buffering off;

  sendfile          on;
  keepalive_timeout 120;

  gzip              on;
  gzip_types        text/plain application/json;

  server_names_hash_bucket_size 128;

  # These two should be the same or nginx will start writing
  #  large request bodies to temp files
  client_body_buffer_size 10m;
  client_max_body_size    10m;

  server {
    listen 80;
    server_name localhost;
    server_tokens off;
    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 172.16.0.0/12;

    location /.well-known/matrix {
      root /usr/share/nginx/html;
      {#
        A somewhat long expires value is used to prevent outages
        in case this is unreachable due to network failure or
        due to the base domain's server completely dying.
      #}
      expires 4h;
      default_type application/json;
      add_header Access-Control-Allow-Origin *;
    }
  }
}