location /controlpanel {
                proxy_pass http://{{CONTROL_PANEL_HOST_ADDR}};

                client_max_body_size 100m;

                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-REWRITER-URL $scheme://$http_host;
}

location /sso/ {
                proxy_pass http://{{SERVICE_SSO_AUTH_HOST_ADDR}}:9833;

	        if ( $scheme = https )
                {
                  proxy_pass https://{{SERVICE_SSO_AUTH_HOST_ADDR}}:9834;
		}

                client_max_body_size 100m;

                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-REWRITER-URL $scheme://$http_host;
		proxy_ssl_verify off;

		proxy_redirect / /;
}