server {
    server_name seo.tidb.ai; # managed by Certbot
    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/seo.tidb.ai/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/seo.tidb.ai/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    access_log /var/log/nginx/seo.tidb.ai.access.log;
    error_log /var/log/nginx/seo.tidb.ai.error.log;

#     location ~ mode=stream {
#         proxy_set_header Host $host;
#         proxy_http_version 1.1;
#         proxy_set_header X-Real-IP $remote_addr;
#         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#         proxy_set_header Origin http://$Host;
#         proxy_connect_timeout 600;
#         proxy_send_timeout 600;
#         add_header 'Access-Control-Allow-Origin' "$http_origin" always;
#         add_header 'Access-Control-Allow-Credentials' 'true' always;
#         add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization';
#         add_header Access-Control-Allow-Methods "DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT";
#         proxy_buffering off;
#         proxy_request_buffering off;
#         proxy_pass http://127.0.0.1:5000;
#     }

    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Origin http://$Host;
        proxy_connect_timeout 600;
        proxy_send_timeout 600;
        proxy_read_timeout 600;
        add_header 'Access-Control-Allow-Origin' "$http_origin" always;
        add_header 'Access-Control-Allow-Credentials' 'true' always;
        add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization';
        add_header Access-Control-Allow-Methods "DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT";
        proxy_buffering off;
        proxy_pass http://127.0.0.1:5000/;
    }
}

server {
    if ($host = seo.tidb.ai) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80 ;
    listen [::]:80 ;
    server_name seo.tidb.ai;
    return 404; # managed by Certbot
}