# sqlservercheck.gisportal.id → SQL Server check (Docker :8090)
# Hanya untuk monitoring internal / Uptime Kuma
upstream sqlservercheck_backend {
	server 127.0.0.1:8090;
}

server {
	listen 80;
	server_name sqlservercheck.gisportal.id;
	return 301 https://sqlservercheck.gisportal.id$request_uri;
}

server {
	listen 443 ssl;
	server_name sqlservercheck.gisportal.id;
	include /etc/nginx/conf.d/ssl.conf;

	location = / {
		return 404;
	}

	location = /ts {
		allow 127.0.0.1;
		allow 172.16.0.0/12;
		allow 10.0.0.0/8;
		deny all;

		proxy_pass http://sqlservercheck_backend/ts;
		proxy_http_version 1.1;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_read_timeout 30s;
	}

	location = /nts {
		allow 127.0.0.1;
		allow 172.16.0.0/12;
		allow 10.0.0.0/8;
		deny all;

		proxy_pass http://sqlservercheck_backend/nts;
		proxy_http_version 1.1;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_read_timeout 30s;
	}
}