70 lines
1.9 KiB
Plaintext
70 lines
1.9 KiB
Plaintext
# Nginx server configuration for Astro static site
|
|
server {
|
|
listen 8080;
|
|
listen [::]:8080;
|
|
server_name _;
|
|
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
# Security headers specific to main site
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
|
|
|
|
# Caching strategy for static assets
|
|
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|webp|woff|woff2|ttf|eot)$ {
|
|
expires 1y;
|
|
add_header Cache-Control "public, immutable";
|
|
add_header Vary "Accept-Encoding";
|
|
access_log off;
|
|
}
|
|
|
|
# Caching for HTML files (shorter cache time)
|
|
location ~* \.html$ {
|
|
expires 1h;
|
|
add_header Cache-Control "public, must-revalidate";
|
|
add_header Vary "Accept-Encoding";
|
|
}
|
|
|
|
# Main location block for Astro routes
|
|
location / {
|
|
try_files $uri $uri/ $uri.html =404;
|
|
|
|
# Handle client-side routing if needed
|
|
# Uncomment if using client-side routing
|
|
# try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
# Specific handling for Astro's _astro directory
|
|
location /_astro/ {
|
|
expires 1y;
|
|
add_header Cache-Control "public, immutable";
|
|
add_header Vary "Accept-Encoding";
|
|
access_log off;
|
|
}
|
|
|
|
# Deny access to sensitive files
|
|
location ~ /\. {
|
|
deny all;
|
|
access_log off;
|
|
log_not_found off;
|
|
}
|
|
|
|
# Health check endpoint
|
|
location /health {
|
|
access_log off;
|
|
return 200 "healthy\n";
|
|
add_header Content-Type text/plain;
|
|
}
|
|
|
|
# Custom error pages
|
|
error_page 404 /404.html;
|
|
error_page 500 502 503 504 /50x.html;
|
|
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
internal;
|
|
}
|
|
}
|