---
apiVersion: v1
kind: ConfigMap
metadata:
  name: nginx-config
data:
  ragflow.conf: |
    server {
        listen 80;
        server_name _;
        root /ragflow/web/dist;

        gzip on;
        gzip_min_length 1k;
        gzip_comp_level 9;
        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
        gzip_vary on;
        gzip_disable "MSIE [1-6]\.";

        location ~ ^/(v1|api) {
            proxy_pass http://localhost:9380;
            include proxy.conf;
        }

        location / {
            index index.html;
            try_files $uri $uri/ /index.html;
        }

        # Cache-Control: max-age~@~AExpires
        location ~ ^/static/(css|js|media)/ {
            expires 10y;
            access_log off;
        }
    }
  proxy.conf: |
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_http_version 1.1;
    proxy_set_header Connection "";
    proxy_buffering off;
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
  nginx.conf: |
    user  root;
    worker_processes  auto;

    error_log  /var/log/nginx/error.log notice;
    pid        /var/run/nginx.pid;

    events {
        worker_connections  1024;
    }

    http {
        include       /etc/nginx/mime.types;
        default_type  application/octet-stream;

        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                        '$status $body_bytes_sent "$http_referer" '
                        '"$http_user_agent" "$http_x_forwarded_for"';

        access_log  /var/log/nginx/access.log  main;

        sendfile        on;
        #tcp_nopush     on;

        keepalive_timeout  65;

        #gzip  on;
        client_max_body_size 128M;

        include /etc/nginx/conf.d/ragflow.conf;
    }
  {{- if .Values.oidc.enable }}
  service_conf.yaml.template: |
    ragflow:
      host: ${RAGFLOW_HOST:-0.0.0.0}
      http_port: 9380
    mysql:
      name: '${MYSQL_DBNAME:-rag_flow}'
      user: '${MYSQL_USER:-root}'
      password: '${MYSQL_PASSWORD:-infini_rag_flow}'
      host: '${MYSQL_HOST:-mysql}'
      port: 3306
      max_connections: 900
      stale_timeout: 300
    minio:
      user: '${MINIO_USER:-rag_flow}'
      password: '${MINIO_PASSWORD:-infini_rag_flow}'
      host: '${MINIO_HOST:-minio}:9000'
    es:
      hosts: 'http://${ES_HOST:-es01}:9200'
      username: '${ES_USER:-elastic}'
      password: '${ELASTIC_PASSWORD:-infini_rag_flow}'
    os:
      hosts: 'http://${OS_HOST:-opensearch01}:9201'
      username: '${OS_USER:-admin}'
      password: '${OPENSEARCH_PASSWORD:-infini_rag_flow_OS_01}'
    infinity:
      uri: '${INFINITY_HOST:-infinity}:23817'
      db_name: 'default_db'
    redis:
      db: 1
      password: '${REDIS_PASSWORD:-infini_rag_flow}'
      host: '${REDIS_HOST:-redis}:6379'

    # postgres:
    #   name: '${POSTGRES_DBNAME:-rag_flow}'
    #   user: '${POSTGRES_USER:-rag_flow}'
    #   password: '${POSTGRES_PASSWORD:-infini_rag_flow}'
    #   host: '${POSTGRES_HOST:-postgres}'
    #   port: 5432
    #   max_connections: 100
    #   stale_timeout: 30
    # s3:
    #   access_key: 'access_key'
    #   secret_key: 'secret_key'
    #   region: 'region'
    #   endpoint_url: 'endpoint_url'
    #   bucket: 'bucket'
    #   prefix_path: 'prefix_path'
    #   signature_version: 'v4'
    #   addressing_style: 'path'
    # oss:
    #   access_key: '${ACCESS_KEY}'
    #   secret_key: '${SECRET_KEY}'
    #   endpoint_url: '${ENDPOINT}'
    #   region: '${REGION}'
    #   bucket: '${BUCKET}'
    #   prefix_path: '${OSS_PREFIX_PATH}'
    # azure:
    #   auth_type: 'sas'
    #   container_url: 'container_url'
    #   sas_token: 'sas_token'
    # azure:
    #   auth_type: 'spn'
    #   account_url: 'account_url'
    #   client_id: 'client_id'
    #   secret: 'secret'
    #   tenant_id: 'tenant_id'
    #   container_name: 'container_name'
    # user_default_llm:
    #   factory: 'Tongyi-Qianwen'
    #   api_key: 'sk-xxxxxxxxxxxxx'
    #   base_url: ''
    #   default_models:
    #     chat_model: 'qwen-plus'
    #     embedding_model: 'BAAI/bge-large-zh-v1.5@BAAI'
    #     rerank_model: ''
    #     asr_model: ''
    #     image2text_model: ''
    oauth:
    #     oauth2:
    #     display_name: "OAuth2"
    #     client_id: "your_client_id"
    #     client_secret: "your_client_secret"
    #     authorization_url: "https://your-oauth-provider.com/oauth/authorize"
    #     token_url: "https://your-oauth-provider.com/oauth/token"
    #     userinfo_url: "https://your-oauth-provider.com/oauth/userinfo"
    #     redirect_uri: "https://your-app.com/v1/user/oauth/callback/oauth2"
      oidc:
        display_name: '${DISPLAY_NAME}'
        client_id: '${CLIENT_ID}'
        client_secret: '${CLIENT_SECRETS}'
        issuer: '${ISSUER}'
        scope: '${SCOPE:openid}'
        redirect_uri: '${REDIRECT_URI}'
    #   github:
    #     type: "github"
    #     icon: "github"
    #     display_name: "Github"
    #     client_id: "your_client_id"
    #     client_secret: "your_client_secret"
    #     redirect_uri: "https://your-app.com/v1/user/oauth/callback/github"
    # authentication:
    #   client:
    #     switch: false
    #     http_app_key:
    #     http_secret_key:
    #   site:
    #     switch: false
    # permission:
    #   switch: false
    #   component: false
    #   dataset: false
  {{- end }}