cd /etc/nginx/sites-available || exit
tee -a cdn.azaion.com << END
server {
    listen 80;
    server_name cdn.azaion.com;
    client_max_body_size 20000M;

    return 301 https://\$host\$request_uri; # Redirect HTTP to HTTPS
}

server {
    listen 443 ssl;
    server_name cdn.azaion.com;
    client_max_body_size 20000M;

    location / {
        proxy_pass http://localhost:9021;  # Proxy to Minio UI on port 9021 (HTTP internally)
        proxy_set_header Host \$host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;

        # websockets handling
        proxy_http_version 1.1;
        proxy_set_header Upgrade \$http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

server {
    listen 80;
    server_name cdnapi.azaion.com;
    client_max_body_size 20000M;

    return 301 https://\$host\$request_uri; # Redirect HTTP to HTTPS
}

server {
    listen 443 ssl;
    server_name cdnapi.azaion.com;
    client_max_body_size 20000M;

    location / {
        proxy_pass http://localhost:9020;  # Proxy to Minio API on port 9020 (HTTP internally)
        proxy_set_header Host \$host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto \$scheme;

        # websockets handling
        proxy_http_version 1.1;
        proxy_set_header Upgrade \$http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}
END
ln -s /etc/nginx/sites-available/cdn.azaion.com /etc/nginx/sites-enabled/

nginx -t #check syntax
certbot --nginx -d cdn.azaion.com -d cdnapi.azaion.com
systemctl restart nginx