# Configuration pour le Serveur 1
server {
    if ($host = stream-fusion.soalic413vmlp.fr) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80;
    server_name stream-fusion.soalic413vmlp.fr;
    return 301 https://$host$request_uri;  # Redirige toutes les requêtes HTTP vers HTTPS


}

server {
    listen 443 ssl;
    server_name stream-fusion.soalic413vmlp.fr;


    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'HIGH:!aNULL:!MD5';

    location / {
        proxy_pass http://192.168.1.111:8080;  # Redirige vers le service sur le port 8080
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    ssl_certificate /etc/letsencrypt/live/stream-fusion.soalic413vmlp.fr/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/stream-fusion.soalic413vmlp.fr/privkey.pem; # managed by Certbot
}

# Configuration pour le Serveur 2
server {
    listen 80;
    server_name debianstore.soalic413vmlp.fr;

    # Redirige les requêtes HTTP vers HTTPS
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name debianstore.soalic413vmlp.fr;

    ssl_certificate /etc/letsencrypt/live/debianstore.soalic413vmlp.fr-0001/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/debianstore.soalic413vmlp.fr-0001/privkey.pem;
    
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'HIGH:!aNULL:!MD5';

    location / {
        proxy_pass http://192.168.1.10:8080;  # Redirige vers le service sur le port 8080
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# Configuration pour le Serveur 
server {
    listen 80;
    server_name asus.soalic413vmlp.fr;

    location / {
        proxy_pass http://192.168.1.173:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

server {
    listen 443 ssl;
    server_name asus.soalic413vmlp.fr;

    ssl_certificate /etc/letsencrypt/live/asus.soalic413vmlp.fr/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/asus.soalic413vmlp.fr/privkey.pem;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'HIGH:!aNULL:!MD5';

    location / {
        proxy_pass http://192.168.1.173:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}