location ^~ /api/provd/ {
    proxy_pass http://127.0.0.1:8666/;

    proxy_set_header    Host                $http_host;
    proxy_set_header    X-Script-Name       /api/provd/;
    proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header    X-Forwarded-Proto   $scheme;
}

location ^~ /device/provisioning/ {
    limit_req zone=provd_provisioning burst=500 nodelay;
    limit_req_status 429;
    # rejections log the request line, which holds the provisioning key: keep
    # them out of the error log (they are still in the masked access log)
    limit_req_log_level info;

    proxy_pass http://127.0.0.1:18667/;

    proxy_set_header    Host                $http_host;
    proxy_set_header    X-Script-Name       /;
    proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header    X-Forwarded-Proto   $scheme;
}
