cbazzaandClaude Opus 4.5
fddc78618e
Build and Deploy to Synology NAS / test (push) Failing after 15m0s
Build and Deploy to Synology NAS / build (push) Has been cancelled
Build and Deploy to Synology NAS / deploy (push) Has been cancelled
Build and Deploy to Synology NAS / notify (push) Has been cancelled
- Add Terraform configuration for AKS cluster deployment - Add Kubernetes manifests for Laravel app (deployment, services, secrets) - Add PostgreSQL on Kubernetes with multi-schema support - Add Nginx Ingress Controller configuration - Add GitHub Actions workflow for Azure deployment - Add HTTP Basic Authentication for production - Add database restore functionality via Kubernetes jobs - Update Dockerfile and nginx config for production - Update database.php for multi-schema connections - Add deployment documentation and quickstart guides Deployed version: 1.0.7 at http://72.144.113.194/ Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
105 lines
3.5 KiB
Plaintext
105 lines
3.5 KiB
Plaintext
server {
|
|
listen 80;
|
|
server_name ${SERVER_NAME};
|
|
|
|
root /var/www/html/public;
|
|
index index.php;
|
|
|
|
# -------------------------------------------------
|
|
# Redirect all HTTP requests to HTTPS (optional, remove if TLS is handled upstream)
|
|
# -------------------------------------------------
|
|
# return 301 https://$host$request_uri;
|
|
|
|
# -------------------------------------------------
|
|
# Livewire + Laravel routes (must come before static block)
|
|
# -------------------------------------------------
|
|
# Specific location for livewire.min.js (redirect to non-minified version)
|
|
location = /livewire/livewire.min.js {
|
|
return 301 /livewire/livewire.js$is_args$args;
|
|
}
|
|
|
|
location ^~ /livewire/ {
|
|
try_files $uri /index.php?$query_string;
|
|
expires off;
|
|
add_header Cache-Control "no-store";
|
|
}
|
|
|
|
location ~ ^/flux/flux(\.min)?\.(js|css)$ {
|
|
expires off;
|
|
try_files $uri $uri/ /index.php?$query_string;
|
|
}
|
|
# -------------------------------------------------
|
|
# Static assets with long caching
|
|
# -------------------------------------------------
|
|
location ~* \.(?:ico|css|js|gif|jpe?g|png|svg|woff2?|eot|ttf|otf|webp|avif)(\?.*)?$ {
|
|
expires 7d;
|
|
add_header Cache-Control "public, max-age=604800, immutable";
|
|
try_files $uri =404;
|
|
access_log off;
|
|
}
|
|
|
|
# -------------------------------------------------
|
|
# Main Laravel entry point
|
|
# -------------------------------------------------
|
|
location / {
|
|
auth_basic "Restricted Access";
|
|
auth_basic_user_file /etc/nginx/.htpasswd;
|
|
|
|
try_files $uri $uri/ /index.php?$query_string;
|
|
}
|
|
|
|
# -------------------------------------------------
|
|
# PHP-FPM configuration (matches your Alpine socket setup)
|
|
# -------------------------------------------------
|
|
location ~ \.php$ {
|
|
include fastcgi_params;
|
|
fastcgi_index index.php;
|
|
fastcgi_pass 127.0.0.1:9000; # <-- switch from socket to TCP
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_param DOCUMENT_ROOT $document_root;
|
|
|
|
fastcgi_read_timeout 60s;
|
|
fastcgi_buffering on;
|
|
fastcgi_buffers 16 16k;
|
|
fastcgi_buffer_size 32k;
|
|
|
|
# --- Proxy headers for HTTPS and load balancers ---
|
|
fastcgi_param HTTP_X_FORWARDED_PROTO $http_x_forwarded_proto;
|
|
fastcgi_param HTTP_X_FORWARDED_HOST $http_host;
|
|
fastcgi_param HTTP_X_FORWARDED_FOR $proxy_add_x_forwarded_for;
|
|
|
|
# --- Tell PHP it's HTTPS when forwarded ---
|
|
set $https_flag "";
|
|
if ($http_x_forwarded_proto = "https") { set $https_flag "on"; }
|
|
fastcgi_param HTTPS $https_flag;
|
|
}
|
|
|
|
# -------------------------------------------------
|
|
# Upload limits
|
|
# -------------------------------------------------
|
|
client_max_body_size 64m;
|
|
|
|
# -------------------------------------------------
|
|
# Security headers
|
|
# -------------------------------------------------
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
|
|
# -------------------------------------------------
|
|
# Gzip compression
|
|
# -------------------------------------------------
|
|
gzip on;
|
|
gzip_types
|
|
text/plain
|
|
text/css
|
|
application/json
|
|
application/javascript
|
|
text/xml
|
|
application/xml
|
|
application/xml+rss
|
|
image/svg+xml;
|
|
gzip_min_length 1000;
|
|
gzip_proxied any;
|
|
gzip_vary on;
|
|
}
|