zulip/puppet/zulip_internal/files/nginx/sites-available/loadbalancer

upstream staging {
    server staging.zulip.net:443;
}

upstream prod {
    server prod0.zulip.net:443;
}

server {
    listen 80;
    return 301 https://$host$request_uri;
}

server {
    listen staging.humbughq.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;

    location / {
        proxy_pass https://staging/;
        include /etc/nginx/zulip-include/loadbalancer;
    }

    location /sockjs {
        proxy_pass https://staging;
        include /etc/nginx/zulip-include/location-sockjs;
    }
}

server {
    # This stanza covers api, www, zephyr, and bare humbughq.com
    listen www.humbughq.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;

    location / {
        proxy_pass https://prod/;
        include /etc/nginx/zulip-include/loadbalancer;
    }

    location /sockjs {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/location-sockjs;
    }
}

server {
    listen staging.zulip.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/staging.zulip.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/staging-zulip.key;

    location / {
        proxy_pass https://staging/;
        include /etc/nginx/zulip-include/loadbalancer;
    }

    location /sockjs {
        proxy_pass https://staging;
        include /etc/nginx/zulip-include/location-sockjs;
    }
}

server {
    # This stanza also covers bare zulip.com
    listen www.zulip.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/www.zulip.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/production-zulip.key;

    location / {
        proxy_pass https://prod/;
        include /etc/nginx/zulip-include/loadbalancer;
    }

    location /sockjs {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/location-sockjs;
    }
}

server {
    listen api.zulip.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/api.zulip.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/production-zulip.key;

    location / {
        proxy_pass https://prod/;
        include /etc/nginx/zulip-include/loadbalancer;
    }
}


server {
    listen zephyr.zulip.com:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/zephyr.zulip.com.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/production-zulip.key;

    location / {
        proxy_pass https://prod/;
        include /etc/nginx/zulip-include/loadbalancer;
    }

    location /sockjs {
        proxy_pass https://prod;
        include /etc/nginx/zulip-include/location-sockjs;
    }
}

server {
    listen external-content.zulipcdn.net:443;

    ssl on;
    ssl_certificate /etc/ssl/certs/external-content.zulipcdn.net.combined-chain.crt;
    ssl_certificate_key /etc/ssl/private/production-zulipcdn.key;

    location / {
        proxy_pass http://127.0.0.1:9292/;
    }
}