worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    # =========================================================================
    # Initial HTTP-only config for obtaining Let's Encrypt certificates
    # After certificates are obtained, switch to nginx.conf
    # =========================================================================
    server {
        listen 80;
        server_name it0api.szaiai.com it0.szaiai.com;

        # Let's Encrypt ACME challenge
        location /.well-known/acme-challenge/ {
            root /var/www/certbot;
        }

        # Temporary: serve a simple response before SSL is ready
        location / {
            return 200 'IT0 - SSL certificate pending...';
            add_header Content-Type text/plain;
        }
    }
}