location /
{
  {% if oauth2_proxy_active | bool %}
  auth_request /oauth2/auth;
  error_page 401 = /oauth2/start;
  {% endif %}

  proxy_pass http://127.0.0.1:{{http_port}}/;

  # headers
  proxy_set_header Host $host;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-Proto $scheme;
  proxy_set_header X-Forwarded-Port 443;
  proxy_set_header Accept-Encoding "";

  # WebSocket specific header
  proxy_http_version 1.1;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "upgrade";

  # deactivate buffering
  proxy_buffering off;
  proxy_request_buffering off;

  # timeouts
  proxy_connect_timeout       1s;
  proxy_send_timeout          900s;
  proxy_read_timeout          900s;
  send_timeout                900s;
}