# Instancia ${NOMBRE} (${SLUG}) — frontend React + API Odoo en puerto ${HTTP_PORT}.
# Acceso público: ${DOMINIO} (agregar el ingress en el dashboard del túnel
# cloudflared: hostname ${DOMINIO} -> service http://localhost:80).
${LAN_COMMENT}
server {
    listen 80;
${LAN_LISTEN}
    server_name ${DOMINIO};

    # Frontend React (mismo build que SKEEN; la marca sale del API /brand)
    location / {
        root ${FRONTEND_DIR};
        try_files $$uri $$uri/ /index.html;
        add_header Cache-Control "no-cache";
    }

    # API Odoo para el frontend
    location /api/odoo/ {
        proxy_pass http://127.0.0.1:${HTTP_PORT}/;
        proxy_http_version 1.1;
        proxy_set_header Host $$host;
        proxy_set_header X-Real-IP $$remote_addr;
        proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $$scheme;
        proxy_read_timeout 120s;
    }

    # Backend Odoo (administración directa, opcional)
    location /web/ {
        proxy_pass http://127.0.0.1:${HTTP_PORT}/web/;
        proxy_http_version 1.1;
        proxy_set_header Host $$host;
        proxy_set_header X-Real-IP $$remote_addr;
        proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $$scheme;
        proxy_read_timeout 120s;
    }
${WACRM_BLOCK}
}