server {
    listen 80;
    listen [::]:80;
    server_name __DOMAIN_PUBLIC__;

    location / {
        proxy_pass         http://localhost:__PORT_PUBLIC__;
        proxy_http_version 1.1;

        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # WebSocket support (Blazor Server SignalR circuits + WASM interop)
        proxy_set_header Upgrade    $http_upgrade;
        proxy_set_header Connection $http_connection;
    }
}