# If you are running RacketMQ behind nginx, e.g. for letsencrypt
# support, then "apt-get install nginx", remove the default symlink
# from /etc/nginx/sites-enabled, and symlink this file into
# /etc/nginx/sites-enabled. Then, restart nginx.

server {
    listen 80;
    listen 443 default_server ssl;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    # error_log /var/log/nginx/error.log debug;

    client_body_in_file_only clean;
    client_body_buffer_size 32K;
    client_max_body_size 30M;
    sendfile on;
    send_timeout 300s;

    ssl_certificate /home/app/live/rmq/letsencrypt/etc/live/websub.reversehttp.net/fullchain.pem;
    ssl_certificate_key /home/app/live/rmq/letsencrypt/etc/live/websub.reversehttp.net/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;

    error_page 500 502 503 504 /500.html;
    location /500.html {
        root /home/app/live/rmq/racketmq/htdocs;
    }

    location / {
        proxy_pass http://127.0.0.1:7827/;
        proxy_set_header Host $host;
        proxy_read_timeout 600s;
        proxy_send_timeout 600s;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}