server {
  listen 80 default_server;

  location /__varnish_check__ {
    # This is the varnish upstream defined in the www.gov.uk vhost
    proxy_pass http://varnish;
  }

  location /_healthcheck_www {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck_www-origin {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck_assets-origin {
    return 200;
  }

  # Send the Strict-Transport-Security header
  include /etc/nginx/add-sts.conf;
  # Required for L7 ALB
  location = /_healthcheck {
    return 200;
  }
  location / {
    return 444;
  }
}

server {
  listen 80 default_server;

  location /__varnish_check__ {
    # This is the varnish upstream defined in the www.gov.uk vhost
    proxy_pass http://varnish;
  }

  location /_healthcheck_www {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck-live_www {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck-ready_www {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck_www-origin {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck-live_www-origin {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck-ready_www-origin {
    proxy_pass http://varnish/__varnish_check__;
  }

  location /_healthcheck_assets-origin {
    return 200;
  }

  location /_healthcheck-live_assets-origin {
    return 200;
  }

  location /_healthcheck-ready_assets-origin {
    return 200;
  }

  # Send the Strict-Transport-Security header
  include /etc/nginx/add-sts.conf;
  # Required for L7 ALB
  location = /_healthcheck {
    return 200;
  }
  location = /_healthcheck-live {
    return 200;
  }
  location = /_healthcheck-ready {
    return 200;
  }
  location / {
    return 444;
  }
}

Add healthcheck-live and healthcheck-ready to router default vhost
Add healthcheck-live and healthcheck-ready to router default vhost

I don't know if these healthchecks are used anywhere, as there don't
seem to be any alerts in integration that these targets are down (and
www-origin works), but there are AWS LBs configured for them, so let's
add the healthchecks just in case.
