worker_processes 1;
events { worker_connections 1024; }

http {

	sendfile on;
	client_max_body_size 500M; 
	server_names_hash_bucket_size 1024;
        proxy_http_version            1.1;
        proxy_set_header              X-Forwarded-Scheme $scheme;
        proxy_set_header              Accept-Encoding "";
	proxy_set_header   Host $host;
	proxy_set_header   X-Real-IP $remote_addr;
	proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
	proxy_set_header   X-Forwarded-Host $server_name;
	#proxy_set_header Upgrade $http_upgrade;
	#proxy_set_header Connection 'upgrade';
	#proxy_cache_bypass $http_upgrade; 

	gzip on;
	gzip_types text/plain application/xml;
	gzip_min_length 1000;


	server {
	listen 80;
        listen 443 default ssl;
	ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$
        ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $
        location / {
            proxy_pass         http://1.1.1.1;
            proxy_redirect     off;
            proxy_set_header   Host $host;
            proxy_set_header   X-Real-IP $remote_addr;
            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header   X-Forwarded-Host $server_name;
		}
	}
	# Connection header for WebSocket reverse proxy
	map $http_upgrade $connection_upgrade {
		default upgrade;
        ''      close;
    }

	include /etc/nginx/conf.d/*.conf;
	resolver 127.0.0.1 ipv6=off valid=40s;  # The DNS IP server
	
	#https://www.tweaked.io/guide/nginx-proxying/
	proxy_cache_path /tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;

}