apiVersion: v1
kind: Secret
metadata:
  name: nginx-conf-secret
type: Opaque
stringData:
  nginx.conf: |-
    events {
      worker_connections  1024;  ## Default
    }

    http {

      # Without this, docker image interaction might give a `413 Request Entity Too Large` (default 1M)
      client_max_body_size 500M;

      server {
        listen 80;
        server_name fakegitea.local;

        location / {
          # Use this if running locally with docker, rather than on k8s
          # proxy_pass http://host.docker.internal:3000;
          proxy_pass http://drone-build-monitor-demo-gitea-service.demo:3000;
        }
      }

      server {
        listen 443 ssl;
        server_name fakegiteatls.local;

        ssl_certificate     /certs/domain.crt;
        ssl_certificate_key /certs/domain.key;
        ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;

        location / {
          # Use this if running locally with docker, rather than on k8s
          # proxy_pass http://host.docker.internal:3000;
          proxy_pass http://drone-build-monitor-demo-gitea-service.demo:3000;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;
        }
      }
    }