events {
  worker_connections  1024;
}

http {
  sendfile    on;
  tcp_nopush  on;
  tcp_nodelay on;

  keepalive_timeout     60;
  types_hash_max_size   2048;
  client_max_body_size  100m;

  include       mime.types;
  default_type  application/octet-stream;
  access_log    /var/log/nginx/access.log;
  error_log     /var/log/nginx/error.log;

  gzip                on;
  gzip_vary           on;
  gzip_proxied        any;
  gzip_comp_level     6;
  gzip_buffers 16     8k;
  gzip_http_version   1.1;
  gzip_types          text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

  upstream k8s {
    server kubernetes-dashboard.kube-system:80;
  }

  server {
    listen    80;
    root      /usr/share/nginx/html;

    location ~ /\.well-known/acme-challenge/ {
      resolver            kube-dns.kube-system valid=1s;
      set $server         certbot.infra.svc.cluster.local:80;
      proxy_pass          http://$server;
      proxy_set_header    Host $host;
      proxy_set_header    X-Real-IP $remote_addr;
      proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header    X-Forwarded-Proto $scheme;
    }
  }

$SERVER_DEFINITIONS$
}