# HTTP 转发 (80 -> 30080)
upstream traefik_http {
    server 127.0.0.1:30080;
}

server {
    listen 80;
    listen [::]:80;
    proxy_pass traefik_http;

    # 超时设置
    proxy_timeout 300s;
    proxy_connect_timeout 10s;
}

# HTTPS 转发 (443 -> 30443)
upstream traefik_https {
    server 127.0.0.1:30443;
}

server {
    listen 443;
    listen [::]:443;

    # SNI 预读 - 让 Traefik 处理 SSL 证书选择
    ssl_preread on;

    proxy_pass traefik_https;

    # 优化的超时设置
    proxy_timeout 1h;
    proxy_connect_timeout 5s;

    # Stream 模块支持的选项
    proxy_responses 1;
    proxy_buffer_size 16k;
}