# Nginx reverse proxy config for Falah Mobile
# Add this inside the server {} block for falahos.my

location /mobile {
    proxy_pass         http://127.0.0.1:4013;
    proxy_http_version 1.1;
    proxy_set_header   Upgrade $http_upgrade;
    proxy_set_header   Connection 'upgrade';
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;
    proxy_cache_bypass $http_upgrade;

    # Allow iframes from ummah.falahos.my
    add_header X-Frame-Options "ALLOW-FROM https://ummah.falahos.my";
    add_header Content-Security-Policy "frame-ancestors 'self' https://ummah.falahos.my";
}