user www-data;
pid /run/nginx.pid;

worker_processes  1;

events {
	worker_connections  1024;
}

http {
	include	   mime.types;
	default_type  application/octet-stream;

	sendfile		on;
	#tcp_nopush	 on;

	server_tokens	off;

	#keepalive_timeout  0;
	keepalive_timeout  65;

	# Serveur pour connexions locales
	server {
		listen	80;
		server_name	localhost;
		
		# Tout en ssl (le sans ssl est autorisé par un patch pour les anciennes versions d'appli ET pour les téléphones)
		ssl on;
		ssl_certificate /etc/nginx/callbox.cert;
		ssl_certificate_key /etc/nginx/callbox.key;
		
		location / {
			proxy_pass	http://localhost:81;
			proxy_redirect	off;
			proxy_set_header		Host		$host;
			proxy_set_header		X-Real-IP	$remote_addr;
			proxy_set_header		X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header		X-Source	"local";
			client_body_buffer_size 128k;
			proxy_connect_timeout	90;
			proxy_send_timeout		90;
			proxy_read_timeout		90;
			proxy_buffers			32 4k;
		}
	}

	# Serveur pour connexions distantes
	server {
		listen		480;
		server_name	localhost;
		
		# Tout en ssl (le sans ssl est autorisé par un patch pour les anciennes versions d'appli ET pour les téléphones)
		ssl on;
		ssl_certificate /etc/nginx/callbox.cert;
		ssl_certificate_key /etc/nginx/callbox.key;

		location /callbox {
			proxy_pass	http://localhost:81;
			proxy_redirect	off;
			proxy_set_header		Host		$host;
			proxy_set_header		X-Real-IP	$remote_addr;
			proxy_set_header		X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header		X-Source	"remote";
			client_max_body_size	10m;
			client_body_buffer_size 128k;
			proxy_connect_timeout	90;
			proxy_send_timeout		90;
			proxy_read_timeout		90;
			# Buffer en auto pour regularite et eviter les timeout sur les connexions distantes lentes
			# proxy_buffers			32 4k;
			include allow.conf;
		}
		
		# Proxy pour config switch
		location /DGS-1100-08V2_1.00.003 {
			proxy_pass      http://10.90.90.90:80;
			proxy_set_header Referer "http://10.90.90.90/";
		}

		# Proxy pour téléphones
		location / {
			proxy_pass	https://10.90.90.89:443;#phone
			proxy_redirect	off;
			client_max_body_size	50m;
			client_body_buffer_size 128k;
			proxy_connect_timeout	90;
			proxy_send_timeout		90;
			proxy_read_timeout		90;
			#proxy_set_header Referer $host;
			proxy_buffers			32 4k;
			#proxy_set_header Referer "http://10.90.90.90/";
	
			include allow.conf;
		}

	}


	# Serveur pour connexion Switch
	server {
		listen          443;
		server_name     localhost;
		ssl on;
                ssl_certificate /etc/nginx/callbox.cert;
                ssl_certificate_key /etc/nginx/callbox.key;

		# Proxy pour téléphones
                location / {
                        proxy_pass      http://10.90.90.90:80;
                        proxy_redirect  off;
                        client_max_body_size    50m;
                        client_body_buffer_size 128k;
                        proxy_connect_timeout   90;
                        proxy_send_timeout              90;
                        proxy_read_timeout              90;
                        proxy_set_header Referer $host;
                        proxy_buffers                   32 4k;
                        proxy_set_header Referer "http://10.90.90.90/";

                }	
	}

}