# register the upload in accounts service (cookies should contain jwt)
log_by_lua_block {
    -- this block runs only when accounts are enabled
    if require("skynet.account").accounts_enabled() then
        local function track(premature, skylink, jwt)
            if premature then return end

            local httpc = require("resty.http").new()

            -- 10.10.10.70 points to accounts service (alias not available when using resty-http)
            local res, err = httpc:request_uri("http://10.10.10.70:3000/track/upload/" .. skylink, {
                method = "POST",
                headers = {
                    ["Cookie"] = "skynet-jwt=" .. jwt,
                    ["Authorization"] = ngx.header["Authorization"],
                    ["Skynet-Api-Key"] = ngx.header["Skynet-Api-Key"],
                },
            })

            if err or (res and res.status ~= ngx.HTTP_NO_CONTENT) then
                ngx.log(ngx.ERR, "Failed accounts service request /track/upload/" .. skylink .. ": ", err or ("[HTTP " .. res.status .. "] " .. res.body))
            end
        end

        -- report all skylinks (header empty if request failed) but only if jwt is preset (user is authenticated)
        if ngx.header["Skynet-Skylink"] and ngx.var.skynet_jwt ~= "" then
            local ok, err = ngx.timer.at(0, track, ngx.header["Skynet-Skylink"], ngx.var.skynet_jwt)
            if err then ngx.log(ngx.ERR, "Failed to create timer: ", err) end
        end
    end

    -- this block runs only when scanner module is enabled
    if os.getenv("PORTAL_MODULES"):match("s") then
        local function scan(premature, skylink)
            if premature then return end

            local httpc = require("resty.http").new()

            -- 10.10.10.101 points to malware-scanner service (alias not available when using resty-http)
            local res, err = httpc:request_uri("http://10.10.10.101:4000/scan/" .. skylink, {
                method = "POST",
            })

            if err or (res and res.status ~= ngx.HTTP_OK) then
                ngx.log(ngx.ERR, "Failed malware-scanner request /scan/" .. skylink .. ": ", err or ("[HTTP " .. res.status .. "] " .. res.body))
            end
        end

        -- scan all skylinks but make sure to only run if skylink is present (empty if request failed)
        if ngx.header["Skynet-Skylink"] then
            local ok, err = ngx.timer.at(0, scan, ngx.header["Skynet-Skylink"])
            if err then ngx.log(ngx.ERR, "Failed to create timer: ", err) end
        end
    end
}