nginx.conf.in

upstream ui_server {
    server unix:/tmp/gunicorn-geotrek.sock fail_timeout=0;
}

upstream api_server {
    server unix:/tmp/gunicorn-geotrek_api.sock fail_timeout=0;
}

map ${DOLLAR}http_origin ${DOLLAR}allow_origin {
    "~${RANDO_SERVER_NAME_PIPE}" ${DOLLAR}http_origin;
    default "";
}

server {
    listen ${NGINX_PORT};
    server_name ${SERVER_NAME};
    server_name_in_redirect on;
    server_tokens off;
    gzip             on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level  4;
    gzip_types       application/json application/geo+json;

    access_log /var/log/nginx/geotrek_access.log;
    error_log /var/log/nginx/geotrek_error.log;

    client_max_body_size 200M;

    location /static {
        expires 1d;
        alias /opt/geotrek-admin/var/static;
    }

    location ~ ^/mobile/(.*)$ {
        add_header Vary "Accept-Language";
	add_header Access-Control-Allow-Origin "*";
        add_header Access-Control-Allow-Methods "GET, OPTIONS";
        root /opt/geotrek-admin/var/mobile/;
        try_files /${DOLLAR}http_accept_language/$1 /nolang/$1 =404;
        gzip on;
        gzip_types text/text text/plain text/xml text/css application/x-javascript application/javascript application/json;
        include mime.types;
        types {
            application/json geojson;
            application/gpx+xml gpx;
            application/x-font-ttf ttf;
        }
    }

    location /media {
        expires 1d;
        alias /opt/geotrek-admin/var/media ;
        add_header Access-Control-Allow-Origin ${DOLLAR}allow_origin;
    }

    location /media_secure {
        internal;
        expires 1d;
        alias /opt/geotrek-admin/var/media;
    }

    location / {
        proxy_set_header X-Forwarded-Proto ${DOLLAR}scheme;
        proxy_set_header X-Forwarded-Host ${DOLLAR}host;
        proxy_set_header X-Forwarded-Server ${DOLLAR}host;
        proxy_set_header X-Forwarded-For ${DOLLAR}proxy_add_x_forwarded_for;

        proxy_set_header Host ${DOLLAR}http_host;
        proxy_redirect off;

        keepalive_timeout 0;

        location ~ ^/api {
            proxy_pass http://api_server;
            proxy_read_timeout ${TIMEOUT}s;
            add_header Access-Control-Allow-Origin ${DOLLAR}allow_origin always;
        }

        proxy_pass http://ui_server;
        proxy_read_timeout ${TIMEOUT}s;
    }
}