basalam/Metabase-Search

worker_processes auto;
pid /run/nginx.pid;

events {
    worker_connections 768;
}

http {
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    gzip on;
    gzip_disable "msie6";
    gzip_min_length 256;
    gzip_types application/xml+rss application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/plain text/x-component text/html;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ssl_stapling on;
    server_tokens off;

    server {
        listen 80;
        server_name metabase.local;

        location / {
            rewrite ^ https://metabase.local$request_uri? permanent;
        }
    }

    server {
        listen 443 ssl http2;
        server_name metabase.local;
        ssl_certificate /etc/ssl/my-cert.pem; # Fake
        ssl_certificate_key /etc/ssl/my-cert.key; # Fake

        ssl_session_cache shared:SSL:50m;
        ssl_session_timeout 5m;
        ssl_stapling on;
        ssl_stapling_verify on;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";

        ssl_dhparam /etc/nginx/dhparams.pem;
        ssl_prefer_server_ciphers on;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        location / {
            proxy_set_header Proxy "";
            proxy_redirect off;
            proxy_pass http://metabase:3000;
        }
        location /api/search {
            proxy_pass http://metabase-search:80;
        }
    }
}