# =============================================================================
# YEDEK: http { } içine map EKLEYEMİYORSANIZ bu location’ları kullanın (ACAO: *).
# Güvenlik: yalnızca /rtc yollarında; tercihen nginx-http-maps-livekit-cors.conf + Origin yansıtması.
#
# proxy_pass URI’sinde sondaki / OLMAMALI — /rtc/validate LiveKit’e aynen gitmeli.
# =============================================================================

large_client_header_buffers 8 64k;
client_header_buffer_size 16k;

location /rtc {
    if ($request_method = OPTIONS) {
        add_header Access-Control-Allow-Origin '*' always;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS, HEAD' always;
        add_header Access-Control-Allow-Headers 'Content-Type, Authorization, Accept, Origin, X-Requested-With, Cache-Control, Pragma, X-Session-ID, X-NZ-Client, X-NZ-Mobile-App' always;
        add_header Access-Control-Max-Age 86400 always;
        add_header Content-Length 0;
        return 204;
    }
    add_header Access-Control-Allow-Origin '*' always;

    proxy_pass http://127.0.0.1:7880;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_read_timeout 86400;
    proxy_send_timeout 86400;
    proxy_buffering off;
}