# /etc/nginx/sites-available/montech.ir
#
# Copy BOTH files:
#   sudo cp deploy/nginx-montech.ir.conf /etc/nginx/sites-available/montech.ir
#   sudo cp deploy/nginx-montech-locations.conf /etc/nginx/snippets/montech-locations.conf
#
# SSL on origin (certbot) is needed only if WCDN Origin = HTTPS (Full / Full Strict).
# If WCDN Origin = HTTP:80, the :443 block below can stay unused.

upstream montech_api {
    server 127.0.0.1:3050;
    keepalive 8;
}

upstream montech_landing {
    server 127.0.0.1:3051;
    keepalive 8;
}

server {
    listen 80;
    listen [::]:80;
    server_name montech.ir www.montech.ir;

    include /etc/nginx/snippets/montech-locations.conf;
}

# Enable after certificates exist:
#   sudo ls /etc/letsencrypt/live/montech.ir/
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name montech.ir www.montech.ir;

    ssl_certificate     /etc/letsencrypt/live/montech.ir/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/montech.ir/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    include /etc/nginx/snippets/montech-locations.conf;
}