upstream lbHTTPSByOMC  {
    server 127.0.0.1:33443 max_fails=3 fail_timeout=30s;
    #server 127.0.0.2:33443 max_fails=3 fail_timeout=30s;
}

server {
    listen       443 ssl http2;
    listen  [::]:443 ssl http2;
    server_name  www.omc.net;

    ssl_certificate /usr/local/etc/omc/certs/www.omc.net.crt;
    ssl_certificate_key /usr/local/etc/omc/certs/www.omc.net.key;

    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_session_timeout  5m;
    ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers on;
    #ssl_dhparam /usr/share/nginx/cert/dhparams.pem;
    
    client_max_body_size 100M;
    keepalive_timeout    180s;

    # access_log  /var/log/nginx/host.access.log  main;
    
    location / {
        root /usr/local/etc/omc/web;

        try_files $uri $uri/ /index.html;
        index  index.html index.htm;
    }

    location /omc-api/ {
        proxy_cache_bypass                  $http_upgrade;
        proxy_set_header Upgrade            $http_upgrade;
        proxy_set_header Connection         "upgrade";
        proxy_set_header Host               $host;
        proxy_set_header X-Real-IP          $remote_addr;
        proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto  $scheme;
        proxy_set_header X-Forwarded-Host   $host;
        proxy_set_header X-Forwarded-Port   $server_port;

        proxy_connect_timeout  180s;
        proxy_send_timeout     180s;
        proxy_read_timeout     180s;

        proxy_pass https://lbHTTPSByOMC/;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        return 301 https://$host$request_uri;
    }
}