| server { |
| listen 80; |
| server_name localhost; |
| root /usr/share/nginx/html; |
| index index.html; |
|
|
| |
| gzip on; |
| gzip_vary on; |
| gzip_min_length 1000; |
| gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml+rss application/json; |
|
|
| |
| location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ { |
| expires 1y; |
| add_header Cache-Control "public, immutable"; |
| } |
|
|
| |
| location /api { |
| proxy_pass http://backend:8000; |
| proxy_http_version 1.1; |
| proxy_set_header Upgrade $http_upgrade; |
| proxy_set_header Connection 'upgrade'; |
| proxy_set_header Host $host; |
| proxy_set_header X-Real-IP $remote_addr; |
| proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
| proxy_set_header X-Forwarded-Proto $scheme; |
| proxy_cache_bypass $http_upgrade; |
|
|
| |
| proxy_read_timeout 300s; |
| proxy_connect_timeout 75s; |
| } |
|
|
| |
| location / { |
| try_files $uri $uri/ /index.html; |
| add_header Cache-Control "no-cache"; |
| } |
|
|
| |
| add_header X-Frame-Options "SAMEORIGIN" always; |
| add_header X-Content-Type-Options "nosniff" always; |
| add_header X-XSS-Protection "1; mode=block" always; |
| } |
|
|
