sharenet/nginx/nginx.conf

user  nginx;
worker_processes auto;
pid /tmp/nginx.pid; 

events { worker_connections 1024; }

http {
  sendfile on;
  tcp_nopush on;
  tcp_nodelay on;

  client_body_temp_path /tmp/client_temp;
  proxy_temp_path /tmp/proxy_temp;
  fastcgi_temp_path /tmp/fastcgi_temp;
  uwsgi_temp_path /tmp/uwsgi_temp;
  scgi_temp_path /tmp/scgi_temp;

  # health
  server {
    listen 8090;
    location = /healthz { return 200 "ok\n"; add_header Content-Type text/plain; }
  }

  # public HTTP entrypoint (host will terminate TLS and proxy here)
  server {
    listen 8080;

    # frontend default
    location / {
      proxy_http_version 1.1;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Connection "";
      proxy_pass http://127.0.0.1:${PROD_FRONTEND_PORT};
    }

    # backend API
    location /api/ {
      proxy_http_version 1.1;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Connection "";
      proxy_pass http://127.0.0.1:${PROD_BACKEND_PORT}/;
    }
  }
}