worker_processes  4;

worker_rlimit_nofile 1024;
events {
	worker_connections  800;
}


http {
	include       mime.types;
	default_type  application/octet-stream;
	index         index.html index.htm;

	keepalive_timeout  65;
	server_tokens off;

	server {
		listen       80;
		listen       [::]:80;
		server_name  localhost;
		root         /var/www/htdocs;

		error_page   500 502 503 504  /50x.html;
		location = /50x.html {
		    root  /var/www/htdocs;
		}
	
		location ^~ /.well-known/acme-challenge/ {
			alias     /var/www/acme/;
		}
		location / {
			rewrite     ^ 'https://revproxy.example.com/' permanent;
		}
	}
	server {
		listen 127.0.0.1;
		server_name localhost;
		
		location /nginx_status {
			stub_status on;
			access_log off;
			allow 127.0.0.1;
			allow ::1;
			deny all;
		}
	}

	server {
		listen       [::]:443;
		server_name  localhost;
		root         /var/www/htdocs;

		ssl                  on;
		ssl_certificate      /etc/ssl/acme/revproxy.example.com.fullchain.pem;
		ssl_certificate_key  /etc/ssl/acme/private/revproxy.example.com.key;

		ssl_session_timeout  5m;
		ssl_session_cache    shared:SSL:1m;

		ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers  HIGH:!aNULL:!MD5:!RC4;
		ssl_prefer_server_ciphers   on;
		location / {
			proxy_ssl_server_name on;
			proxy_busy_buffers_size   512k;
			proxy_buffers   4 512k;
			proxy_buffer_size   256k;
			proxy_pass https://test-target.example.net/;
			proxy_http_version 1.1;
			proxy_set_header Upgrade $http_upgrade;
			proxy_set_header Connection "Upgrade";
			proxy_set_header Host test-target.example.net;
			proxy_set_header X-Forwarded-Host $host;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header Accept-Encoding "";
			proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
	#		sub_filter "test-target.example.net" "revproxy.example.com";
	#		sub_filter "<h1>" "<h1>Via revproxy.example.com: ";
	#		sub_filter "<h2>" "<h2>Via revproxy.example.com: ";
	#		sub_filter "<h3>" "<h3>Via revproxy.example.com: ";

	#		sub_filter_once off;
		}
	}
}