backend: harden rootless app lifecycle orchestration

2026-06-11 00:24:32 -04:00
parent 09ec64932f
commit c393b96da3
56 changed files with 7543 additions and 1994 deletions
@@ -0,0 +1,30 @@
+server {
+    listen 8175;
+    server_name _;
+
+    proxy_intercept_errors on;
+    error_page 500 502 503 504 = @wait_page;
+
+    location /assets/ {
+        root /usr/share/nginx/html;
+        add_header Cache-Control "public, max-age=3600" always;
+        try_files $uri =404;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8177;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    location @wait_page {
+        root /usr/share/nginx/html;
+        add_header Cache-Control "no-store" always;
+        try_files /index.html =503;
+    }
+}