server {
    listen {{ .interface }}:{{ .port }} default_server;

    include /etc/nginx/includes/server_params.conf;
    include /etc/nginx/includes/proxy_params.conf;

    location / {
        allow   172.30.32.2;
        deny    all;

        proxy_pass http://octoprint/;       # make sure to add trailing slash here!
        proxy_set_header X-Forwarded-For    172.30.32.2, $proxy_add_x_forwarded_for; # This is intentional, access through Ingress should use "autologin local".
        proxy_set_header X-Forwarded-Host   $host
        proxy_set_header X-Forwarded-Proto  $scheme;
        proxy_set_header X-Script-Name      {{ .ingress_entry }};
        proxy_http_version                  1.1;
        client_max_body_size                0;
        # proxy_set_header Host               $http_host;
        # proxy_set_header Upgrade            $http_upgrade;
        # proxy_set_header Connection         "upgrade";
        # proxy_set_header X-Real-IP          $remote_addr;
    }

    location /webcam/ {
        proxy_pass {{ .camera_host }};
    }
}