server {
    listen 80 default_server;
    server_name _;

    # Format de logs dédié Grafana/Promtail
    access_log  /var/log/nginx/4nk_node.access.log;
    error_log   /var/log/nginx/4nk_node.error.log;

    # ihm_client (HTTP)
    location / {
        proxy_pass http://ihm-client.4nk.local:80/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # sdk_storage
    location /sdk_storage/ {
        proxy_pass http://sdk-storage.4nk.local:8081/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # blindbit
    location /blindbit/ {
        proxy_pass http://blindbit.4nk.local:8000/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # relais (HTTP API)
    location /relay1/ { proxy_pass http://sdk-relay1.4nk.local:8091/; }
    location /relay2/ { proxy_pass http://sdk-relay2.4nk.local:8093/; }
    location /relay3/ { proxy_pass http://sdk-relay3.4nk.local:8095/; }

    # relais (WebSocket)
    location /relay1/ws/ {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://sdk-relay1.4nk.local:8090/;
    }
    location /relay2/ws/ {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://sdk-relay2.4nk.local:8092/;
    }
    location /relay3/ws/ {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://sdk-relay3.4nk.local:8094/;
    }

    # sdk_signer (WS et HTTP si exposés sur 9090/9092)
    location /signer/ws/ {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_pass http://sdk-signer.4nk.local:9090/;
    }
    location /signer/ {
        proxy_pass http://sdk-signer.4nk.local:9092/;
    }

    # lecoffre-front
    location /coffre/ {
        proxy_pass http://coffre-front.4nk.local:3003/;
    }

    # miniback (expose /logs si nécessaire)
    location /miniback/ {
        proxy_pass http://miniback.4nk.local:8081/;
    }

    # Grafana (sous-chemin /grafana)
    location /grafana/ {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://127.0.0.1:3000/;
    }
}