50 lines
1.5 KiB
Plaintext
50 lines
1.5 KiB
Plaintext
|
server {
|
||
|
|
listen 80;
|
||
|
|
server_name _;
|
||
|
|
|
||
|
|
root /usr/share/nginx/html;
|
||
|
|
index index.html;
|
||
|
|
|
||
|
|
location /api/ {
|
||
|
|
proxy_pass http://api:3000;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||
|
|
}
|
||
|
|
|
||
|
|
# The files that say which release is live are never cached: index.html
|
||
|
|
# (it names the hashed bundles), sw.js (a stale service worker keeps serving
|
||
|
|
# the old precache) and version.json (the update gate polls it). They used
|
||
|
|
# to fall under the 6-month rule below, which could pin a browser to an old
|
||
|
|
# release. Exact matches win over that regex.
|
||
|
|
location = /index.html {
|
||
|
|
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
|
||
|
|
try_files $uri =404;
|
||
|
|
}
|
||
|
|
location = /sw.js {
|
||
|
|
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
|
||
|
|
try_files $uri =404;
|
||
|
|
}
|
||
|
|
location = /version.json {
|
||
|
|
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
|
||
|
|
try_files $uri =404;
|
||
|
|
}
|
||
|
|
location = /manifest.webmanifest {
|
||
|
|
add_header Cache-Control "no-cache" always;
|
||
|
|
try_files $uri =404;
|
||
|
|
}
|
||
|
|
|
||
|
|
location / {
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# Optional: Cache static assets
|
||
|
|
location ~* \.(?:ico|css|js|gif|jpe?g|png|woff2?|eot|ttf|svg)$ {
|
||
|
|
expires 6M;
|
||
|
|
access_log off;
|
||
|
|
add_header Cache-Control "public";
|
||
|
|
}
|
||
|
|
}
|