# Redirects HTTP requests to HTTPS
server {
        listen 80 default_server;
        listen [::]:80 default_server;
        server_name _;
        return 301 https://$host$request_uri;
}

# Vaadin PUSH
map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
}

### DEV MANUFACTURER
upstream site {
    server #.#.#.#:8080;
}

server {
        listen          *:443;
        server_name     site.com;

        # SSL SETUP
        ssl                     on;
        ssl_protocols           TLSv1 TLSv1.1 TLSv1.2;
        ssl_certificate         /etc/nginx/cert.crt;
        ssl_certificate_key     /etc/nginx/cert.key;

        ssl_session_cache shared:SSL:1m;

        # Error pages
        error_page 404 500 502 503 504 /error/50x.html;
        location /error/ {
                root /usr/share/nginx/html/;
        }

        # Static Content
        location /static/ {
                root /usr/share/nginx/html/;
        }

        # REVERSE_PROXY to Tomcat 8
        location / {
                 # reverse proxy follow
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_pass http://site/app/;
        }

        # REVERSE_PROXY to Tomcat 8 /VAADIN
        location /VAADIN {
                # reverse proxy follow
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_pass http://site/VAADIN/;
        }


        # VAADIN specific
        location /PUSH {
               proxy_http_version        1.1;
               proxy_set_header          Upgrade $http_upgrade;
               proxy_set_header          Connection $connection_upgrade;
               proxy_buffering           off;
               proxy_ignore_client_abort off;
               proxy_pass                http://site/app/PUSH/;
               proxy_read_timeout 84600s;
               proxy_send_timeout 84600s;
        }
}