server {
    listen         80;
    server_name    localhost;
    
    client_max_body_size 2m;
    
    add_header Referrer-Policy "origin-when-cross-origin";
    add_header X-Content-Type-Options nosniff;

    location / {
        location /static/ {
            alias  /liberaforms/static/;
        }
        location /favicon.ico {
            alias /liberaforms/uploads/media/brand/favicon.ico;
        }
        location /logo.png {
            alias /liberaforms/uploads/media/brand/logo.png;
        }
        location /file/media/ {
            alias /liberaforms/uploads/media/;
        }
        location /metrics {
            return 404;
        }
        proxy_pass          http://forms:5000;
        proxy_set_header    Host    $host;
        proxy_set_header    X-Forwarded-For $remote_addr;
        proxy_set_header    X-Real-IP   $remote_addr;
        proxy_pass_header   server;
        if ($request_uri !~ "/embed") {
           add_header X-Frame-Options "SAMEORIGIN";
        }
    }
}