# === Portainer via Nginx Proxy Manager ===

location / {
    # === Backend Portainer ===
    proxy_pass http://192.168.1.150:9010/;

    # Headers classiques
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    # Supprimer protections anti-iframe de Portainer
    proxy_hide_header X-Frame-Options;
    proxy_hide_header Content-Security-Policy;
    add_header X-Frame-Options "ALLOWALL";
    add_header Content-Security-Policy "frame-ancestors *" always;

    # Support du sous-chemin / proxy
    proxy_set_header X-Portainer-Base-Url /;

    # WebSocket Portainer
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_read_timeout 86400;
    proxy_send_timeout 86400;
    proxy_buffering off;

    # Subfilter pour thème custom
    proxy_set_header Accept-Encoding "";
    sub_filter_once on;
    sub_filter '</head>' '<link rel="stylesheet" type="text/css" href="https://theme.myoueb.fr/css/base/portainer/space-gray.css"></head>';

    # Tracker JS Umami
    sub_filter '</body>' '<script async defer data-website-id="3f04ed-896-424-5a7-9b9ef87007" src="https://way.myoueb.fr/script.js"></script></body>';
}