include:
  {% if salt['grains.get']('include_secrets', True) %}
  - secrets.role.minio
  {% endif %}
  - role.common.nginx

nginx:
  servers:
    managed:
      s3.opensuse-project.net.conf:
        config:
          - server:
              - server_name: s3.opensuse-project.net
              - listen: '[::]:80 default_server'
              - ignore_invalid_headers: "off"
              - proxy_buffering: "off"
              - location /:
                  - proxy_set_header: X-Real-IP $remote_addr
                  - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
                  - proxy_set_header: X-Forwarded-Proto $scheme
                  - proxy_set_header: Host $http_host
                  - proxy_connect_timeout: 300
                  - proxy_http_version: 1.1
                  - proxy_set_header: Connection ""
                  - chunked_transfer_encoding: "off"
                  - proxy_redirect: "off"
                  - client_max_body_size: 20M
                  - proxy_pass: http://localhost:9000
        enabled: True

zypper:
  repositories:
    server:database:
      baseurl: https://downloadcontent.opensuse.org/repositories/server:/database/$releasever/
      priority: 100
      refresh: True