{% set application_id = front_proxy_application_id | default(application_id) %}
{% set domain = front_proxy_domain | default(domain) %}
server
{
  server_name {{ domain }};
  {% include 'roles/sys-svc-proxy/templates/headers/buffers.conf.j2' %}

  {% if lookup('sso', application_id, 'is_proxy_gated') %}
    {% include 'roles/web-app-keycloak/templates/sso_proxy/endpoint.conf.j2'%}
  {% endif %}

  {% include 'roles/sys-front-inj-all/templates/server.conf.j2'%}

  {% if webserver_extra_configuration is defined %}
    {{ webserver_extra_configuration }}
  {% endif %}

  {% include 'roles/sys-front-tls/templates/nginx_ssl_header.j2' %}

  {% if lookup('sso', application_id, 'is_proxy_gated') %}
    {% set acl = lookup('sso', application_id, 'oauth2_acl') %}

    {% if acl.blacklist is defined %}
      {% set sso_proxy_enabled = false %}
      {% set location = "/" %}
      {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}

      {% for loc in acl.blacklist %}
        {% set sso_proxy_enabled = true %}
        {% set location = loc %}
        {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
      {% endfor %}

    {% elif acl.whitelist is defined %}
      {% set sso_proxy_enabled = true %}
      {% set location = "/" %}
      {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}

      {% for loc in acl.whitelist %}
        {% set sso_proxy_enabled = false %}
        {% set location = loc %}
        {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
      {% endfor %}

    {% else %}
      {% set sso_proxy_enabled = true %}
      {% set location = "/" %}
      {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
    {% endif %}

  {% else %}
    {% set sso_proxy_enabled = false %}
    {% set location = "/" %}
    {% include 'roles/sys-svc-proxy/templates/location/html.conf.j2' %}
  {% endif %}

  {% include 'roles/web-app-prometheus/templates/nginx/locations.conf.j2' %}

  {% include 'roles/sys-svc-proxy/templates/mcp/vhost.conf.j2' %}

}