---
# https://code.samourai.io/dojo/samourai-dojo/-/tree/develop/docker/my-dojo/nginx/mainnet.conf
- name: Dojo | Configure nginx to include the template
  ansible.builtin.import_role:
    name: nginxinc.nginx_core.nginx_config
  vars:
    nginx_config_http_template_enable: true
    nginx_config_http_template:
      - template_file: http/default.conf.j2
        deployment_location: "/etc/nginx/conf.d/samourai-dojo_{{ inventory_hostname }}.conf"
        backup: false
        config:
          servers:
            - core:
                listen:
                  - address: "{{ default_interface_ipv4_address|default(ansible_default_ipv4.address) }}:{{ samourai_dojo_https_port|default(4440) }} ssl"
                include:
                  - "/etc/nginx/acme_{{ inventory_hostname }}.conf"
              log:
                access:
                  - off
              locations:
                - location: = /
                  rewrite:
                    return:
                      url: /admin
                      code: 301
                - location: /admin/
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_ws_http_port|default(8080)}}/static/admin/"
            - core:
                server_name: "{{ samourai_dojo_onion }}"
                listen:
                  - address: "127.0.0.1:{{ samourai_dojo_onion_port|default(80) }}"
                send_timeout: 600s
              log:
                access:
                  - off
              locations:
                  # Proxy WebSocket connections first
                - location: /v2/inv
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_ws_http_port|default(8080)}}"
                    connect_timeout: 600s
                    read_timeout: 600s
                    send_timeout: 600s
                    http_version: '1.1'
                    set_header:
                    - field: Host
                      value: $http_host
                    - field: Connection
                      value: $connection_upgrade
                    - field: Upgrade
                      value: $http_upgrade
                # PushTX server is separate, so proxy first
                - location: /v2/pushtx/
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_pushtx_http_port|default(8081)}}/"
                    connect_timeout: 600s
                    read_timeout: 600s
                    send_timeout: 600s
                # Tracker server is separate, so proxy first
                - location: /v2/tracker/
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_tracker_http_port|default(8082)}}/"
                    connect_timeout: 600s
                    read_timeout: 600s
                    send_timeout: 600s
                # Proxy requests to maintenance tool
                - location: /admin/
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_ws_http_port|default(8080)}}/static/admin/"
                    connect_timeout: 600s
                    read_timeout: 600s
                    send_timeout: 600s
                # Proxy all other v2 requests to the accounts server
                - location: /v2/
                  proxy:
                    pass: "http://127.0.0.1:{{ samourai_dojo_ws_http_port|default(8080)}}/"
                    connect_timeout: 600s
                    read_timeout: 600s
                    send_timeout: 600s
                # Redirect onion address to maintenance tool
                - location: = /
                  rewrite:
                    return:
                      url: /admin
                      code: 301
                # Serve remaining requests
                - location: /
                  rewrite:
                    return:
                      code: 200
                      text: >
                        '{"status":"ok"}'
                  headers:
                    add_headers:
                      - name: Content-Type
                        value: application/json