server {
  include /etc/nginx/mime.types;

  # NOTE:
  # - urgently consider configuring TLS instead
  # - maybe keep a forwarder from HTTP to HTTPS
  listen 80;

  # NOTE:
  # - Comment out this line if you have no IPv6
  listen [::]:80;

  # NOTE:
  # - replace with your actual server name.
  server_name localhost;

  access_log /var/log/nginx/libeufin-bank.log;
  error_log /var/log/nginx/libeufin-bank.err;

  location / {
    # NOTE: urgently change to 'https' once TLS has been configured.
    proxy_set_header X-Forwarded-Proto "$scheme";
    proxy_set_header X-Forwarded-Host "localhost";
    proxy_set_header X-Forwarded-Prefix /;
    # FIXME: should use UNIX domain socket once
    # supported by libeufin-bank!
    proxy_pass http://localhost:9099;
  }

}
