upstream puma_oauth2id_staging {
  server unix:/var/www/oauth2id/shared/tmp/sockets/puma.sock fail_timeout=0;
}
 
server {
  listen 80;
  server_name sso-id.com;
  return 301 https://$host$1$request_uri;
}
 
server {
  listen 443;
  ssl on;
  ssl_certificate /home/ec2-user/.acme.sh/sso-id.com_ecc/fullchain.cer;
  ssl_certificate_key /home/ec2-user/.acme.sh/sso-id.com_ecc/sso-id.com.key;
  server_name sso-id.com;
  root /var/www/oauth2id/current/public;
  try_files $uri/index.html $uri @puma_sccsa_production;
 
  client_max_body_size 4G;
  keepalive_timeout 10;
 
  error_page 500 502 504 /500.html;
  error_page 503 @503;
 
  location @puma_sccsa_production {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $host;
    proxy_redirect off;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
    proxy_set_header X-Forwarded-Proto https;
    proxy_pass http://puma_oauth2id_staging;
    # limit_req zone=one;
    access_log /var/www/oauth2id/shared/log/nginx.access.log;
    error_log /var/www/oauth2id/shared/log/nginx.error.log;
  }
 
  location ^~ /assets/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
  }
 
  location ^~ /packs/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
  }
 
  location = /50x.html {
    root html;
  }
 
  location = /404.html {
    root html;
  }
 
  location @503 {
    error_page 405 = /system/maintenance.html;
    if (-f $document_root/system/maintenance.html) {
      rewrite ^(.*)$ /system/maintenance.html break;
    }
    rewrite ^(.*)$ /503.html break;
  }
 
  if ($request_method !~ ^(GET|HEAD|PUT|PATCH|POST|DELETE|OPTIONS)$ ){
    return 405;
  }
 
  if (-f $document_root/system/maintenance.html) {
    return 503;
  }
}