#Drone (only for RPC access from other nodes - UI access is proxied directly through Teleport)
server {
	listen			192.168.0.115:443 ssl http2;
	server_name		drone.two.secure.squirrelcube.xyz;

	ssl_certificate		/etc/ssl/tp/fullchain.pem;
	ssl_certificate_key	/etc/ssl/tp/private/privkey.pem;

	location		/ {
		proxy_pass	https://drone-local.two.secure.squirrelcube.xyz;
	}
}

#Runner Exec
server {
	listen			192.168.0.115:443 ssl http2;
	server_name		drone-runner-exec-local.two.secure.squirrelcube.xyz;

	ssl_certificate		/etc/ssl/tp/fullchain.pem;
	ssl_certificate_key 	/etc/ssl/tp/private/privkey.pem;

	location		/ {
		proxy_pass	http://127.0.0.3:3000;
	}
}

#Runner SSH
server {
	listen			192.168.0.115:443 ssl http2;
	server_name		drone-runner-ssh-local.two.secure.squirrelcube.xyz;

	ssl_certificate		/etc/ssl/tp/fullchain.pem;
	ssl_certificate_key	/etc/ssl/tp/private/privkey.pem;

	location		/ {
		proxy_pass	http://127.0.0.3:3001;
	}
}