{% include "_header_comment.conf" %}

server {
  set $server {{ forward_ip }};
  set $port   {{ forward_port }};

  {% include "_listen.conf" %}
  {% include "_certificates.conf" %}
  {% include "_assets.conf" %}
  {% include "_exploits.conf" %}

  access_log /data/logs/proxy_host-{{ id }}.log proxy;

  # TODO: Advanced config options

  location / {
    {%- if access_list_id > 0 -%}
    # Access List
    auth_basic            "Authorization required";
    auth_basic_user_file  /config/access/{{ access_list_id }};
    {%- endif %}

    {% include "_forced_ssl.conf" %}

    # Proxy!
    include conf.d/include/proxy.conf;
  }
}