user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main '$remote_addr - $remote_user [$time_local] "$request" '
                  ' $status $body_bytes_sent "$http_referer" '
                  ' $http_user_agent $http_x_forwarded_for $request_time; '
                  ' $upstream_response_time $upstream_status $upstream_addr';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    # define upstream cluster, configure primary and backup instances
    upstream apiserver_backend {
        # valid values include IP, domain, and port
        server 172.29.6.117:8443 max_fails=3 fail_timeout=30s;
        server 172.29.6.101:8443 max_fails=3 fail_timeout=30s;
        # server apiserver2.example.com:80 max_fails=3 fail_timeout=30s;
        # backup server
        #server backup.example.com:80 backup;
    }

    server {
        listen 8443 ssl;
        server_name *.akrostar-tech.com;  # replace with your domain name

        ssl_certificate     /etc/nginx/ssl/server.crt;     # cetificate file path
        ssl_certificate_key /etc/nginx/ssl/server.key;     # key file path
        ssl_session_cache   shared:SSL:1m;
        ssl_session_timeout 10m;
        ssl_protocols       TLSv1.2 TLSv1.3;
        ssl_ciphers         HIGH:!aNULL:!MD5;

        location / {
            proxy_pass https://apiserver_backend;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_next_upstream error timeout http_500 http_502 http_503 http_504;
            proxy_connect_timeout 3s;
            proxy_read_timeout 30s;
            proxy_send_timeout 30s;
        }

        access_log /var/log/nginx/apiserver_access.log main;
        error_log /var/log/nginx/apiserver_error.log;
    }
}