ваше сообщение коммита

This commit is contained in:
2026-03-06 13:30:54 +03:00
parent d028f78237
commit 1bf6b13246
2 changed files with 70 additions and 57 deletions

View File

@@ -6,6 +6,9 @@ http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
resolver 127.0.0.11 valid=10s;
resolver_timeout 5s;
# Убираем ограничение по размеру загружаемых файлов (база данных масштабируется)
client_max_body_size 0;
@@ -18,6 +21,8 @@ http {
listen 80;
server_name ${DOMAIN};
set $backend_upstream "${BACKEND_CONTAINER}:8000";
root /usr/share/nginx/html;
index index.html;
@@ -30,7 +35,7 @@ http {
# Разрешаем доступ к robots.txt и sitemap.xml для поисковых систем
location = /robots.txt {
proxy_pass http://${BACKEND_CONTAINER}:8000/api/pages/public/robots.txt;
proxy_pass http://$backend_upstream/api/pages/public/robots.txt;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Real-IP $remote_addr;
@@ -40,7 +45,7 @@ http {
}
location = /sitemap.xml {
proxy_pass http://${BACKEND_CONTAINER}:8000/api/pages/public/sitemap.xml;
proxy_pass http://$backend_upstream/api/pages/public/sitemap.xml;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Real-IP $remote_addr;
@@ -78,12 +83,12 @@ http {
add_header X-Content-Type-Options "nosniff" always;
}
# API
location /api/ {
# API — ^~ приоритет перед regex
location ^~ /api/ {
# Rate limiting для API (отключено)
# limit_req zone=api_limit_per_ip burst=100 nodelay;
proxy_pass http://${BACKEND_CONTAINER}:8000/api/;
proxy_pass http://$backend_upstream/api/;
proxy_connect_timeout 120s;
proxy_send_timeout 120s;
proxy_read_timeout 600s;
@@ -98,9 +103,9 @@ http {
add_header X-XSS-Protection "1; mode=block" always;
}
# WebSocket поддержка
location /ws {
proxy_pass http://${BACKEND_CONTAINER}:8000/ws;
# WebSocket поддержка — ^~ приоритет
location ^~ /ws {
proxy_pass http://$backend_upstream/ws;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";