# FRASA Ecosystem — reverse proxy (modo HTTP, red local)
# Se usa cuando aun no hay certificado SSL (DDNS sin apuntar a este servidor).
# Cuando el dominio resuelva aqui: certbot --webroot y volver a nginx.conf (443).

server {
    listen 80;
    server_name _;

    # Uploads de hasta 10MB (expedientes de clientes)
    client_max_body_size 10m;

    # Challenge de Let's Encrypt (para cuando se expida el cert)
    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }

    # API Gateway
    location /api/ {
        proxy_pass http://api:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # Apps web (cada contenedor sirve su SPA con su base path)
    location /quote/  { proxy_pass http://cotizador:80;     proxy_set_header Host $host; }
    location /client/ { proxy_pass http://alta-clientes:80; proxy_set_header Host $host; }
    location /pay/    { proxy_pass http://cobranza:80;      proxy_set_header Host $host; }

    # Landing (raíz)
    location / {
        proxy_pass http://landing:80;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}