# Configuration Nginx pour Club DynaSQY (reverse proxy)
# À placer dans /etc/nginx/sites-available/club-dynasqy
# Puis: sudo ln -s /etc/nginx/sites-available/club-dynasqy /etc/nginx/sites-enabled/
# Puis: sudo nginx -t && sudo systemctl reload nginx

# Si vous utilisez Docker, décommentez la section SSL et ajustez les noms de domaine
# Certificat SSL avec Let's Encrypt:
# sudo apt install certbot python3-certbot-nginx
# sudo certbot --nginx -d votre-domaine.fr

server {
    listen 80;
    server_name votre-domaine.fr;

    # Redirection vers HTTPS (décommentez après Certbot)
    # return 301 https://$server_name$request_uri;

    location / {
        proxy_pass http://127.0.0.1:3001;  # Frontend (port 3001 en Docker, ou 5173 en dev)
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location /api/ {
        proxy_pass http://127.0.0.1:3000;  # Backend Express
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# Serveur HTTPS (décommentez après obtention du certificat SSL)
# server {
#     listen 443 ssl http2;
#     server_name votre-domaine.fr;
#
#     ssl_certificate /etc/letsencrypt/live/votre-domaine.fr/fullchain.pem;
#     ssl_certificate_key /etc/letsencrypt/live/votre-domaine.fr/privkey.pem;
#     include /etc/letsencrypt/options-ssl-nginx.conf;
#     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
#
#     location / {
#         proxy_pass http://127.0.0.1:3001;
#         proxy_http_version 1.1;
#         proxy_set_header Upgrade $http_upgrade;
#         proxy_set_header Connection 'upgrade';
#         proxy_set_header Host $host;
#         proxy_cache_bypass $http_upgrade;
#         proxy_set_header X-Real-IP $remote_addr;
#         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#         proxy_set_header X-Forwarded-Proto $scheme;
#     }
#
#     location /api/ {
#         proxy_pass http://127.0.0.1:3000;
#         proxy_http_version 1.1;
#         proxy_set_header Upgrade $http_upgrade;
#         proxy_set_header Connection 'upgrade';
#         proxy_set_header Host $host;
#         proxy_cache_bypass $http_upgrade;
#         proxy_set_header X-Real-IP $remote_addr;
#         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#         proxy_set_header X-Forwarded-Proto $scheme;
#     }
# }