nginx.conf

worker_processes 1;
error_log /var/log/nginx/error.log debug;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
}

http {
   # set search paths for pure Lua external libraries (';;' is the default path):
   lua_package_path '/usr/local/openresty/lualib/?.lua;;';
   # cache for discovery metadata documents
   lua_shared_dict discovery 1m;
   # cache for JWKs
   lua_shared_dict jwks 1m;

   resolver 127.0.0.11;
   index   index.html index.htm;

   server {
     set $access_token '';
     set $session_cookie_samesite off;
     set $session_name compas_session;

     listen       80 default_server;
     listen       [::]:80 default_server;
     server_name  reverse-proxy;

     # set client body size to 150M #
     client_max_body_size 150M;

     # I disabled caching so the browser won't cache the site.
     expires           0;
     add_header        Cache-Control private;

     # Default forward all web calls to the OpenSCD Container
     location / {
       include /etc/nginx/include/authenticate.include;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;

       proxy_pass http://open-scd:8080/;

       proxy_set_header Host $http_host;
       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # Forwarding to KeyCloak container.
     location /auth/ {
       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;

       proxy_pass http://keycloak:8080/auth/;

       proxy_set_header Host $http_host;
       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # Forwarding to the SCL Validator Service container (websockets).
     location /compas-scl-data-service/scl-ws/ {
       include /etc/nginx/include/authenticate.include;

       proxy_http_version 1.1;
       proxy_set_header Upgrade           $http_upgrade;
       proxy_set_header Connection        "Upgrade";
       proxy_set_header Host              $host;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://scl-data-service:8080/compas-scl-data-service/scl-ws/;
     }

     # Forwarding to the SCL Data Service container.
     location /compas-scl-data-service/ {
       include /etc/nginx/include/authenticate.include;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://scl-data-service:8080/compas-scl-data-service/;

       proxy_set_header Host $http_host;
       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # Forwarding to the CIM Mapping Service container.
     location /compas-cim-mapping/ {
       include /etc/nginx/include/authenticate.include;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://cim-mapping:8080/compas-cim-mapping/;

       proxy_set_header Host $http_host;
       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # Forwarding to the SCL Auto Alignment Service container.
     location /compas-scl-auto-alignment/ {
       include /etc/nginx/include/authenticate.include;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://scl-auto-alignment:8080/compas-scl-auto-alignment/;

       proxy_set_header Host $http_host;
       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # Forwarding to the SCL Validator Service container (websockets).
     location /compas-scl-validator/validate-ws/ {
       include /etc/nginx/include/authenticate.include;

       proxy_http_version 1.1;
       proxy_set_header Upgrade           $http_upgrade;
       proxy_set_header Connection        "Upgrade";
       proxy_set_header Host              $host;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://scl-validator:8080/compas-scl-validator/validate-ws/;
     }

     # Forwarding to the SCL Validator Service container (http).
     location /compas-scl-validator/ {
       include /etc/nginx/include/authenticate.include;

       proxy_set_header Host              $http_host;

       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;
       proxy_set_header X-Forwarded-Port  $server_port;
       proxy_set_header Authorization     "Bearer ${access_token}";

       proxy_pass http://scl-validator:8080/compas-scl-validator/;

       proxy_cache_bypass $http_upgrade;
       proxy_redirect off;
     }

     # redirect server error pages to the static page /40x.html
     error_page 404 /404.html;
       location = /40x.html {
     }
     # redirect server error pages to the static page /50x.html
     error_page 500 502 503 504 /50x.html;
       location = /50x.html {
     }
   }
}