server {
  server_name {{ domain }};

  {% include 'roles/sys-svc-letsencrypt/templates/ssl_header.j2' %}

  {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}
  
  {% include 'roles/sys-svc-proxy/templates/headers/content_security_policy.conf.j2' %}

  {% include 'roles/sys-svc-proxy/templates/headers/access_control_allow.conf.j2' %}
  
  ##
  # Application
  ##

  {% set location = "@html" %}
  {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}

  location / {
    try_files /dev/null {{ location }};
  }

  location = /api/v1/videos/upload-resumable {
    client_max_body_size    0;
    proxy_request_buffering off;

    try_files /dev/null {{ location }};
  }

  location ~ ^/api/v1/videos/(upload|([^/]+/studio/edit))$ {
    limit_except POST HEAD { deny all; }
    client_max_body_size  12G; # default is 1M
    add_header            X-File-Maximum-Size 8G always; # inform backend of the set value in bytes before mime-encoding (x * 1.4 >= client_max_body_size)

    try_files /dev/null {{ location }};
  }

  location ~ ^/api/v1/(videos|video-playlists|video-channels|users/me) {
    client_max_body_size                      6M; # default is 1M
    add_header            X-File-Maximum-Size 4M always; # inform backend of the set value in bytes before mime-encoding (x * 1.4 >= client_max_body_size)

    try_files /dev/null {{ location }};
  }

  ##
  # Websocket
  ##

  {% set webserver_websocket_location = "@websocket" %}
  {% include 'roles/sys-svc-proxy/templates/location/ws.conf.j2' %}

  location /socket.io {
    try_files /dev/null {{ webserver_websocket_location }};
  }

  location /tracker/socket {
    # Peers send a message to the tracker every 15 minutes
    # Don't close the websocket before then
    proxy_read_timeout 15m; # default is 60s

    try_files /dev/null {{ webserver_websocket_location }};
  }
}