upstream gulag {
	server unix:/tmp/gulag.sock fail_timeout=0;
}

# c[4-6|e]?.ppy.sh is used for bancho
# osu.ppy.sh is used for /web, /api, etc.
# a.ppy.sh is used for osu! avatars

# gulag
server {
	server_name ~^(?:c[e4-6]?|a|b)\.owo69\.me$;
	listen [::]:443;
	ssl_certificate /etc/ssl/certs/owo.crt;
	ssl_certificate_key /etc/ssl/certs/owo.key;
	client_max_body_size 64m;

	location / {
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header Host $http_host;
		proxy_redirect off;
		proxy_pass http://gulag;
	}

}



server {
	server_name osu.owo69.me;
	listen [::]:443;
	ssl_certificate /etc/ssl/certs/owo.crt;
	ssl_certificate_key /etc/ssl/certs/owo.key;
	client_max_body_size 64m;

	# gulag
	location ~^/(?:web|api|users|ss|d|p|beatmaps|beatmapsets|community) {
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header Host $http_host;
		proxy_redirect off;
		proxy_pass http://gulag;
	}

	# gulag-web
	location / {
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header Host $http_host;
		proxy_redirect off;
		proxy_pass http://127.0.0.1:8000;
	}

}



server {
	listen [::]:443;
	ssl_certificate /etc/ssl/certs/owo.crt;
	ssl_certificate_key /etc/ssl/certs/owo.key;
	server_name assets.owo69.me;

	location / {
		default_type image/png;
		root /home/ubuntu/gulag/.data/assets/;
	}

}





#  server switcher support (temporary, -devserver is only supported by cuttingedge)
server {
	listen [::]:80;
	listen [::]:443 ssl;
	server_name ~^(?:c[e4-6]?|osu|a|b)\.ppy\.sh$;
	ssl_certificate     /etc/ssl/certs/ppy.crt;
	ssl_certificate_key /etc/ssl/certs/ppy.key;
	client_max_body_size 64m;
	
	location / {
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header Host $http_host;
		proxy_redirect off;
		proxy_pass http://gulag;
	}

}

server {
	listen [::]:80;
	listen [::]:443 ssl;
	server_name assets.ppy.sh;
	ssl_certificate     /etc/ssl/certs/ppy.crt;
	ssl_certificate_key /etc/ssl/certs/ppy.key;

	location / {
		default_type image/png;
		root /home/ubuntu/gulag/.data/assets/;
	}

}