server {
    listen 8443 ssl;
    ssl_certificate /etc/tls/server.crt;
    ssl_certificate_key /etc/tls/server.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    root /usr/share/nginx/html;
    index index.html;
    location /api/ {
        resolver 127.0.0.11 valid=10s ipv6=off;
        set $bff http://bff:8082;
        proxy_pass $bff;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
    location / { try_files $uri $uri/ /index.html; }
}