location = /api/hololake/enterprise/device-gate/health {
    limit_except GET { deny all; }
    proxy_pass http://127.0.0.1:8033/health;
    proxy_set_header Host $host;
    add_header Cache-Control "no-store" always;
}
location = /api/hololake/enterprise/device-gate/enroll {
    limit_except POST { deny all; }
    proxy_pass http://127.0.0.1:8033/v1/device/enroll;
    proxy_set_header Host $host;
    proxy_set_header Authorization $http_authorization;
    client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/challenges {
    limit_except POST { deny all; }
    proxy_pass http://127.0.0.1:8033/v1/challenges;
    proxy_set_header Host $host;
    client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/challenges/verify {
    limit_except POST { deny all; }
    proxy_pass http://127.0.0.1:8033/v1/challenges/verify;
    proxy_set_header Host $host;
    client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/session {
    limit_except GET { deny all; }
    proxy_pass http://127.0.0.1:8033/v1/session;
    proxy_set_header Host $host;
    proxy_set_header Authorization $http_authorization;
    add_header Cache-Control "no-store" always;
}