@_@miss.nem.one

upstream misskey {
    least_conn;
    server 192.168.90.1:3001 fail_timeout=10;
    server 192.168.90.10:3001 fail_timeout=10;
    server 192.168.90.13:3001 fail_timeout=10;
}

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off;

    server {

    server_name mk.shc.kanagawa.jp; 
    ssl_session_cache shared:ssl_session_cache:10m;
    ssl_protocols TLSv1.2 TLSv1.3;
    client_max_body_size 80m;

  location /storage/ {
    limit_except GET {
      deny all;
    }

    resolver 1.1.1.1; 

    proxy_pass https://mkshc.sgp1.vultrobjects.com/storage/;

    proxy_buffering off;
    proxy_redirect off;
    proxy_http_version 1.1;
    proxy_set_header Host mkshc.sgp1.vultrobjects.com;
    add_header Cache-Control "public, max-age=31536000, immutable";
    add_header Strict-Transport-Security "max-age=31536000";
    tcp_nodelay on;

  }

        location / {
            proxy_pass http://misskey;
        proxy_set_header Host $host;
        proxy_http_version 1.1;
        proxy_redirect off;

        # If it's behind another reverse proxy or CDN, remove the following.
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;

        # For WebSocket
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;

        # Cache settings
        proxy_cache cache1;
        proxy_cache_lock on;
        proxy_cache_use_stale updating;
        add_header X-Cache $upstream_cache_status;
        }

    listen [::]:443 ssl; 
    listen 443 ssl; 

    ssl_certificate cloudflare.pem;
    ssl_certificate_key cloudflare.key;

    server_tokens off;
}