include /etc/nginx/modules_enabled/*.conf;

events {
  worker_connections 1024;
}

http {
  server {
    listen 80;
    server_name radioiceberg.net www.radioiceberg.net localhost 127.0.0.1;
    rewrite ^/(.*) https://radioiceberg.net/$1 permanent;
  }

  server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    include /etc/nginx/mime.types;
    server_name radioiceberg.net www.radioiceberg.net localhost 127.0.0.1;

    #SSL
	  #ssl_certificate /etc/letsencrypt/live/radioiceberg.net/fullchain.pem;
	  ssl_certificate_key /etc/letsencrypt/live/radioiceberg.net/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/radioiceberg.net/chain.pem;

    location / {
      root /var/www/website;
      index index.html;
    }

    location /stream {
      proxy_read_timeout 3000;
      proxy_connect_timeout 3000;
      proxy_redirect off;
      proxy_pass http://icecast:8000/iceberg.ogg;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-Server $host;
      proxy_set_header X-Forwarded-For $remote_addr;
    }

    location /meta {
      proxy_pass http://metadata:7000;
      proxy_http_version 1.1;
      proxy_connect_timeout 1d;
      proxy_send_timeout 1d;
      proxy_read_timeout 1d;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
    }
  }
}