location / {
    proxy_pass http://10.0.0.10:8001;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    allow 10.0.0.0/24;
    allow 192.168.0.0/24;
    allow 172.16.0.0/12;
    deny all;
}

location /api/ {
    proxy_pass http://10.0.0.10:8002/api/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    allow 10.0.0.0/24;
    allow 192.168.0.0/24;
    allow 172.16.0.0/12;
    deny all;
}