map $http_upgrade $connection_upgrade {
    default upgrade;
    "" close;
}

map $http_x_forwarded_proto $effective_forwarded_proto {
    default $scheme;
    https https;
}

server_tokens off;

upstream wagtail_backend {
    server backend:8000;
    keepalive 16;
}

upstream astro_frontend {
    server frontend:4321;
    keepalive 16;
}

server {
    listen 80 default_server;
    server_name _;

    location = /nginx-health {
        access_log off;
        return 200 "ok\n";
    }

    location / {
        return 404;
    }
}

server {
    listen 80;
    server_name __DOMAIN__;

    location ^~ /.well-known/acme-challenge/ {
        root /var/www/certbot;
        default_type text/plain;
        try_files $uri =404;
    }

    include /etc/nginx/http-enabled/site.conf;
}

include /etc/nginx/tls-enabled/*.conf;