upstream gmba_django {
    server web:8000;
}

server {
    listen 80;

    client_max_body_size 256m;

    location / {
        proxy_pass http://gmba_django;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_redirect off;
    }

    location /static/ {
        alias /home/app/app/static/;
        expires max;
    }

    location /media/ {
        alias /home/app/app/media/;
        expires max;
    }

    add_header Content-Security-Policy "frame-ancestors https://www.gmba.unibe.ch"
}