upstream staging {
    server staging.zulip.net:443;

    keepalive 10000;
}

upstream prod {
    server prod0.zulip.net:443;

    keepalive 10000;
}

server {
    listen 80;
    return 301 https://$host$request_uri;
}

server {
    listen staging.zulip.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/wildcard-all.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/wildcard-all.key;

    location / {
        proxy_pass https://staging/;
        include /etc/nginx/zulip-include/proxy;
    }

    location /sockjs {
        proxy_pass https://staging;
        include /etc/nginx/zulip-include/location-sockjs;
    }

    location ~ /json/get_events|/json/events|/api/v1/events {
        proxy_pass https://staging;
        include /etc/nginx/zulip-include/proxy_longpolling;
    }
}

server {
    # This stanza also covers bare zulip.com
    listen www.zulip.com:443 default_server;

    ssl on;
    ssl_certificate /etc/ssl/certs/wildcard-all.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/wildcard-all.key;

    location / {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/proxy;
    }

    location /sockjs {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/location-sockjs;
    }

    location ~ /json/get_events|/json/events|/api/v1/events {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/proxy_longpolling;
    }
}

server {
    listen www.zulip.com:443;
    server_name external-content.zulipcdn.net;


    ssl on;
    ssl_certificate /etc/ssl/certs/wildcard-all.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/wildcard-all.key;

    location / {
        proxy_pass http://127.0.0.1:9292;
        include /etc/nginx/zulip-include/proxy;
    }
}