server {
    include listen;
    include listen_ssl;
    
    ssl_certificate /etc/nginx/ssl/kino-backoffice.yandex-team.ru.crt;
    ssl_certificate_key /etc/nginx/ssl/kino-backoffice.yandex-team.ru.key;

    proxy_redirect     off;
    proxy_set_header   Host             $host;
    proxy_set_header   X-Real-IP        $remote_addr;
    proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    proxy_connect_timeout      60;
    proxy_send_timeout         1800;
    proxy_read_timeout         1800;
    proxy_buffer_size          16k;
    proxy_buffers              16 128k;
    proxy_temp_path   /var/tmp/nginx;

    client_max_body_size       100m;
    client_body_buffer_size    256k;

    large_client_header_buffers 4 8k;

    gzip on;
    gzip_comp_level 6;
    gzip_types       application/json text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    server_name ~^((kino-backoffice|kino-bko01g)?\.(tst\.)?(content\.)?yandex(-team)?\.(ru|net))$;

    location /exports {
        autoindex on;
        alias /var/lib/yandex-kino-export/;
    }
    
    location / {
        proxy_pass  http://127.0.0.1:6903;
    }

    location ~* /\.ht {
        deny all;
    }
}
