vdi-cloud/deploy/nginx.live.conf

18 lines
686 B
Plaintext

server {
listen 80;
listen 443 ssl;
ssl_certificate /run/secrets/tls/server.pem;
ssl_certificate_key /run/secrets/tls/server-key.pem;
ssl_protocols TLSv1.2 TLSv1.3;
server_name _;
root /usr/share/nginx/html;
index index.html;
client_max_body_size 1m;
add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy same-origin always;
add_header X-Frame-Options DENY always;
location /api/ { proxy_pass http://api:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $remote_addr; }
location /healthz { proxy_pass http://api:8080; }
location / { try_files $uri $uri/ /index.html; }
}