# Globale SSL-Konfiguration für alle Server-Blöcke
ssl_certificate     /etc/ssl/private/_wildcard.ki.intern.pem;
ssl_certificate_key /etc/ssl/private/_wildcard.ki.intern-key.pem;

# 1. Das Dashboard (Deine index.html auf dem Dell .25)
server {
    listen 443 ssl;
    server_name ki.intern;

    root /var/www/html;
    index index.html;
}

# 2. n8n (Weiterleitung an Inference-Server .57)
server {
    listen 443 ssl;
    server_name n8n.ki.intern;

    location / {
        proxy_pass http://192.168.2.57:5678;
        include proxy_params;
        proxy_buffering off;
    }
}

# 3. ComfyUI (Weiterleitung an .57 mit WebSocket-Support)
server {
    listen 443 ssl;
    server_name comfy.ki.intern;

    location / {
        proxy_pass http://192.168.2.57:8190;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
    }
}

# 4. Open WebUI / Chat (Weiterleitung an .57)
server {
    listen 443 ssl;
    server_name chat.ki.intern;

    location / {
        proxy_pass http://192.168.2.57:3000;
        include proxy_params;
    }
}
