# ========================================
# Imam Javad Platform - Nginx Configuration
# Single Domain - Clean Architecture
# ========================================

# ========== Upstream Definitions ==========
upstream django_backend {
    server 88.99.212.243:8010;
    keepalive 32;
}

upstream nextjs_frontend {
    server 88.99.212.243:7226;
    keepalive 32;
}

upstream chat_service {
    server 88.99.212.243:8020;
    keepalive 32;
}

# ========== Proxy Settings (Reusable) ==========
# Include this file or copy these settings
# /etc/nginx/snippets/proxy-params.conf

server {
    listen 80;
    listen 443 ssl;
    server_name imamjavad.nwhco.ir imamjavad.newhorizonco.uk;
    
    # ssl_certificate     /etc/nginx/certs/nwhco.pem;
    # ssl_certificate_key /etc/nginx/certs/nwhco.key;
    # include /etc/nginx/options-ssl-nginx.conf;

    # ========== Global Settings ==========
    client_max_body_size 500M;
    client_body_timeout 600s;
    client_header_timeout 60s;
    proxy_connect_timeout 600s;
    proxy_send_timeout 600s;
    proxy_read_timeout 600s;

    # ========== 1. Static Files (Highest Priority) ==========
    location /static/ {
        alias /home/app/web/imam_javad_staticfiles/;
        expires 30d;
        add_header Cache-Control "public, immutable";
        access_log off;
    }

    location /media/ {
        alias /home/app/web/imam_javad_mediafiles/;
        expires 30d;
        add_header Cache-Control "public, immutable";
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods "GET, OPTIONS";
        access_log off;
    }

    # ========== 2. Next.js Assets ==========
    location /_next/ {
        proxy_pass http://nextjs_frontend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        expires 1y;
        add_header Cache-Control "public, immutable";
        access_log off;
    }

    # ========== 3. API Endpoints ==========
    location /api/ {
        proxy_pass http://django_backend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Authorization $http_authorization;
        proxy_pass_header Authorization;
        client_max_body_size 1200M;
    }

    # ========== 4. Chat Service (WebSocket) ==========
    location /chat {
        proxy_pass http://chat_service;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        client_max_body_size 1200M;
        
        # WebSocket timeouts
        proxy_read_timeout 3600s;
        proxy_send_timeout 3600s;
    }

    # ========== 5. i18n Language Switcher ==========
    location /i18n/ {
        proxy_pass http://django_backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # ========== 6. Django Admin Panel (Single Pattern) ==========
    # Matches: /en/imam-javad/admin/, /fa/imam-javad/admin/, /imam-javad/admin/
    location ~ ^/(en|fa)?/?imam-javad/ {
        proxy_pass http://django_backend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        client_max_body_size 1200M;
    }

    # ========== 7. Dovoodi Admin Panel (Single Pattern) ==========
    # Matches: /en/dovoodi/admin/, /fa/dovoodi/admin/, /dovoodi/admin/
    location ~ ^/(en|fa)?/?dovoodi/ {
        proxy_pass http://django_backend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        client_max_body_size 1200M;
    }

    # ========== 8. Swagger & API Documentation ==========
    # Matches: /en/swagger/, /fa/swagger/, /en/redoc/, /fa/redoc/, /en/docs/
    location ~ ^/(en|fa)/(swagger|redoc|docs) {
        proxy_pass http://django_backend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Authorization $http_authorization;
        proxy_pass_header Authorization;
    }

    # ========== 9. Filer (Django File Manager) ==========
    location /filer/ {
        proxy_pass http://django_backend;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        client_max_body_size 1200M;
    }

    # ========== 10. Admin Entry Point Redirect ==========
    # /admin → /en/imam-javad/admin/
    location = /admin {
        return 301 /en/imam-javad/admin/;
    }
    
    location = /admin/ {
        return 301 /en/imam-javad/admin/;
    }

    # ========== 11. Next.js Frontend (Catch-all - Lowest Priority) ==========
    location / {
        proxy_pass http://nextjs_frontend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}