server {
    server_name famille.horel.org;
    listen 80;
    try_files $uri @application;

    location /static {
        root /home/thibaut/code/famille-flask/;
    }

    location @application {
        include uwsgi_params;
        uwsgi_pass unix:/run/uwsgi/famille.sock;
        uwsgi_param HTTP_X_REMOTE_USER $auth_user;
    }

    auth_request /validate;
    auth_request_set $auth_user $upstream_http_x_remote_user;
    error_page 401 = @error_401;

    location @error_401 {
        return 302 https://id.horel.org/login?next=$schem://$http_host$request_uri;

    location = /validate {
        internal;
        proxy_pass_request_body off;
        proxy_set_header Content-Length "";
        proxy_set_header Host $host;
        proxy_set_header X-Original-URI $request_uri;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_pass http://127.0.0.1:8080/validate;
    }

}