map $http_upgrade $connection_upgrade {
  default upgrade;
  ''      close;
}

# Helpful for larger uploads via API (tweak as you wish)
client_max_body_size 400m;

server {
  listen 80;
  server_name _;

  # Common proxy settings
  proxy_set_header Host              $host;
  proxy_set_header X-Real-IP         $remote_addr;
  proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto $scheme;

  # --- Frontend (Vite dev server) ---
  # Pass EVERYTHING else to Vite dev server on `web:5173`
  # Includes HMR websocket support.
  location / {
    proxy_pass http://web:5173;
    proxy_http_version 1.1;
    proxy_set_header Upgrade    $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
  }

  # --- API ---
  # Strip the /api prefix (so backend sees /foo instead of /api/foo)
  location /api/ {
    proxy_pass http://snoop-api:8080/;  # note the trailing slash -> strips /api
    proxy_http_version 1.1;

    # WebSocket/SSE-friendly defaults for API (covers /api/ws etc.)
    proxy_set_header Upgrade    $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
  }

  # --- LIVE ---
  # HLS playlist/segments
  location /hls/ {
    proxy_pass  http://mediamtx:8888/;
    proxy_http_version 1.1;
  }  

  # WebRTC WHIP/WHEP/test pages
  location /webrtc/ {
    proxy_pass  http://mediamtx:8889/;
    proxy_http_version 1.1;
  }
  
  # --- MQTT over WebSocket (EMQX) ---
  # Clients connect to ws://<host>/mqtt/ws
  location /mqtt/ws {
    proxy_pass http://emqx:8083/mqtt;  # EMQX WS path is /mqtt
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
  }
}