# /etc/nginx/snippets/proxy-params.conf
proxy_http_version 1.1;
proxy_set_header Host              $host;
proxy_set_header X-Real-IP         $remote_addr;
# OVERWRITE, not $proxy_add_x_forwarded_for: a client-supplied X-Forwarded-For
# must never reach the app, or the lead rate limiter can be side-stepped.
proxy_set_header X-Forwarded-For   $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;

proxy_connect_timeout 5s;
proxy_send_timeout    60s;
# 60s, not the usual 30s: server/src/amocrm.ts retries 3x with a 15s per-attempt
# timeout plus backoff. A shorter timeout would cut off a lead that was about to
# succeed on its third attempt.
proxy_read_timeout    60s;