#!/bin/bash

cat > /etc/nginx/sites-enabled/default <<EOL
upstream backend {
    server 10.67.1.2; # IP HarryPotter
    server 10.67.1.3; # IP RonWeasley
    server 10.67.1.14; # IP HermioneGranger (setelah nomor 5)
}

server {
	listen 80;
	listen [::]:80;

    server_name _;

	error_log /var/log/nginx/error.log;
	access_log /var/log/nginx/access.log;

    auth_basic              "Secure Area";
    auth_basic_user_file    /etc/nginx/secretchamber;

	location / {
        proxy_pass http://backend;
        proxy_set_header    X-Real-IP       \$remote_addr;
        proxy_set_header    X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header    Host            \$http_host;
    }

    location ~* /informatika$ {
        proxy_pass https://www.its.ac.id;

        rewrite ^.*$ /informatika/id/beranda/  break;

        proxy_set_header Host www.its.ac.id;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;

        proxy_ssl_server_name on;
        proxy_ssl_protocols TLSv1.2 TLSv1.3;
    }
}
EOL

nginx -s reload