# This enables insecure, unencrypted HTTP requests to ports 80 and 8080 For enhanced security,
# this configuration should not be enabled. Due to the way ATAK and WinTAK work, enabling this configuration allows
# any unauthenticated user who can access your server on port 8080 to interact with the Marti API.
server {
        # Redirect all HTTP requests on port 80 to HTTPS on port 443
        if ($server_port = 80) {
            return 301 https://$host$request_uri;
        }

        listen 80;
        listen [::]:80;
        listen 8080 default_server;
        listen [::]:8080 default_server;

        root /var/www/html/opentakserver;

        index index.html index.htm index.nginx-debian.html;

        server_name opentakserver_8080;

        location ~ ^/(api|Marti) {
                 proxy_pass http://127.0.0.1:8081;
                 proxy_http_version 1.1;
                 proxy_set_header Host $host;
                 proxy_set_header X-Forwarded-For $remote_addr;
        }

        location /socket.io {
                include proxy_params;
                proxy_http_version 1.1;
                proxy_buffering off;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_pass http://127.0.0.1:8081/socket.io;
        }

        # Proxy WebRTC requests to MediaMTX
        location ~ ^/webrtc(/?)(.*)$ {
                proxy_pass https://127.0.0.1:8889/$2$is_args$args;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_redirect off;

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        # Proxy HLS requests to MediaMTX
        location ~ ^/hls(/?)(.*)$ {
                proxy_pass https://127.0.0.1:8888/$2$is_args$args;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_redirect off;

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        try_files $uri /index.html;
        client_max_body_size 100M;
}