# Ein AI Proxy - Add this as a new server block or include in your existing nginx config
# Place at: /etc/nginx/sites-available/ai-proxy
# Then: sudo ln -s /etc/nginx/sites-available/ai-proxy /etc/nginx/sites-enabled/
# Then: sudo nginx -t && sudo systemctl reload nginx
#
# Prerequisites:
#   - DNS A record for ai.maybe.zone pointing to your server IP
#   - SSL cert (use certbot: sudo certbot --nginx -d ai.maybe.zone)

server {
    listen 443 ssl http2;
    server_name ai.maybe.zone;

    # SSL certs - certbot will fill these in, or point to your existing certs
    # ssl_certificate /etc/letsencrypt/live/ai.maybe.zone/fullchain.pem;
    # ssl_certificate_key /etc/letsencrypt/live/ai.maybe.zone/privkey.pem;

    # SSE streaming support - critical for Claude Code / Roo Code
    proxy_buffering off;
    proxy_cache off;
    proxy_read_timeout 600s;
    proxy_send_timeout 600s;

    # Max body size for large prompts with long context
    client_max_body_size 50m;

    location / {
        proxy_pass http://127.0.0.1:3100;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # SSE streaming headers
        proxy_set_header Connection '';
        chunked_transfer_encoding on;
    }
}

# HTTP -> HTTPS redirect
server {
    listen 80;
    server_name ai.maybe.zone;
    return 301 https://$host$request_uri;
}