# maelstrom-ui nginx config
# Per plan §2: proxy /api/, /health, /ready to the openviking Service.
# /bot/ is deliberately NOT proxied — bot stays disabled (scope decision #3);
# any Web Studio call to /bot/v1/* 404s at this layer instead of reaching a disabled backend.
server {
    listen 80;
    server_name _;

    location /api/ {
        proxy_pass http://openviking.openviking.svc.cluster.local:1933/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location /health {
        proxy_pass http://openviking.openviking.svc.cluster.local:1933/health;
        proxy_set_header Host $host;
    }

    location /ready {
        proxy_pass http://openviking.openviking.svc.cluster.local:1933/ready;
        proxy_set_header Host $host;
    }

    # bot stays disabled — no proxy for /bot/, static 404 by default nginx behavior.

    location / {
        root /usr/share/nginx/html;
        index index.html;
        try_files $uri $uri/ /index.html;
    }
}