proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

location / {
  proxy_pass http://127.0.0.1:{{ vault_port }};
}

location /notifications/hub/negotiate {
  proxy_pass http://127.0.0.1:{{ vault_port }};
}

location /notifications/hub {
  proxy_pass http://127.0.0.1:{{ vault_websocket_port }};
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "upgrade";
  proxy_set_header Forwarded $remote_addr;
}


{% if admin_net is defined -%}
location /admin {
  {% for network in admin_net -%}
  allow {{ network }};
  {% endfor %}

  proxy_pass http://127.0.0.1:{{ vault_port }};
}
{%- endif %}