worker_processes auto;

events {
    worker_connections 1024;
}

http {
    # Enable logging to see what's happening
    error_log /dev/stderr warn;
    access_log /dev/stdout;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_min_length 256;
    gzip_types
        text/plain
        text/css
        text/xml
        text/javascript
        application/javascript
        application/json
        application/xml
        application/rss+xml
        image/svg+xml;

    # Define rate limit zone: 10MB memory, 5 requests per second per IP
    limit_req_zone $binary_remote_addr zone=ratelimit:10m rate=5r/s;

    server {
        listen 8606;

        # Bypass rate limit for static assets and Next.js internal files
        location /_next/static/ {
            proxy_pass http://127.0.0.1:3000;
            proxy_http_version 1.1;
            proxy_set_header Host $host;

            # Cache static assets for 1 year (they have hashed filenames)
            add_header Cache-Control "public, max-age=31536000, immutable";
        }

        location /_next/ {
            proxy_pass http://127.0.0.1:3000;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header Host $host;
        }

        # Apply rate limit to actual page loads and API requests
        location / {
            # Increased burst to 30 to allow normal page loads that fetch multiple APIs/images
            limit_req zone=ratelimit burst=30 nodelay;
            
            # Proxy to the Next.js app
            proxy_pass http://127.0.0.1:3000;
            
            # Next.js often requires HTTP/1.1
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            
            # Forward headers
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
}