official completion --fix prod

Author: CarterPerez-dev

backend/pyproject.toml

@@ -167,7 +167,6 @@ load-plugins = [
     "pylint_per_file_ignores", 
 ]
 persistent = true
-suggestion-mode = true
 ignore = [
     "alembic",
     "venv",
@@ -219,6 +218,7 @@ disable = [
 [tool.pylint-per-file-ignores]
 "alembic/env.py" = "no-member"
 "conftest.py" = "import-outside-toplevel"
+"app/__main__.py" = "pointless-string-statement"
 
 [tool.pylint.format]
 max-line-length = 95

frontend/src/pages/admin/index.tsx

@@ -23,7 +23,7 @@ type ModalState =
   | { type: 'delete'; user: UserResponse }
 
 export function Component(): React.ReactElement {
-  const [page, setPage] = useState(PAGINATION.DEFAULT_PAGE)
+  const [page, setPage] = useState<number>(PAGINATION.DEFAULT_PAGE)
   const [modal, setModal] = useState<ModalState>({ type: 'closed' })
 
   const { data, isLoading } = useAdminUsers({

frontend/vite.config.ts

@@ -40,15 +40,25 @@ export default defineConfig(({ mode }) => {
     },
 
     build: {
-      target: 'ES2022',
+      target: 'esnext',
+      cssTarget: 'chrome100',
       sourcemap: isDev ? true : 'hidden',
-      minify: 'esbuild',
+      minify: 'oxc',
       rollupOptions: {
         output: {
-          manualChunks: {
-            'vendor-react': ['react', 'react-dom', 'react-router-dom'],
-            'vendor-query': ['@tanstack/react-query'],
-            'vendor-state': ['zustand'],
+          manualChunks(id: string): string | undefined {
+            if (id.includes('node_modules')) {
+              if (id.includes('react-dom') || id.includes('react-router')) {
+                return 'vendor-react'
+              }
+              if (id.includes('@tanstack/react-query')) {
+                return 'vendor-query'
+              }
+              if (id.includes('zustand')) {
+                return 'vendor-state'
+              }
+            }
+            return undefined
           },
         },
       },

infra/docker/frontend-builder.prod

@@ -41,8 +41,8 @@ RUN rm -rf /usr/share/nginx/html/* && \
 
 COPY --from=builder /app/dist /usr/share/nginx/html
 
-COPY infra/nginx/nginx.conf /etc/nginx/nginx.conf
-COPY infra/nginx/prod.nginx /etc/nginx/conf.d/default.conf
+COPY --chown=nginx:nginx infra/nginx/nginx.prod.conf /etc/nginx/nginx.conf
+COPY --chown=nginx:nginx infra/nginx/prod.nginx /etc/nginx/conf.d/default.conf
 
 RUN chown -R nginx:nginx /usr/share/nginx/html && \
     chown -R nginx:nginx /var/cache/nginx && \

infra/nginx/nginx.prod.conf

@@ -0,0 +1,81 @@
+# AngelaMos | 2025
+# nginx.prod.conf
+# Production nginx configuration (no dev frontend upstream)
+
+worker_processes auto;
+worker_rlimit_nofile 65535;
+
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;
+
+events {
+    worker_connections 4096;
+    multi_accept on;
+    use epoll;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    # WebSocket upgrade handling
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        ''      close;
+    }
+
+    upstream backend {
+        server backend:8000 max_fails=3 fail_timeout=30s;
+        keepalive 32;
+        keepalive_requests 1000;
+        keepalive_timeout 60s;
+    }
+
+    limit_req_zone $binary_remote_addr zone=api_limit:10m rate=10r/s;
+    limit_req_zone $binary_remote_addr zone=auth_limit:10m rate=1r/s;
+    limit_conn_zone $binary_remote_addr zone=conn_limit:10m;
+    limit_req_status 429;
+
+    log_format main_timed '$remote_addr - $remote_user [$time_local] '
+                          '"$request" $status $body_bytes_sent '
+                          '"$http_referer" "$http_user_agent" '
+                          'rt=$request_time uct="$upstream_connect_time" '
+                          'uht="$upstream_header_time" urt="$upstream_response_time"';
+
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+    types_hash_max_size 2048;
+    server_tokens off;
+
+    # Buffer sizes
+    client_body_buffer_size 128k;
+    client_header_buffer_size 16k;
+    client_max_body_size 10m;
+    large_client_header_buffers 4 16k;
+
+    client_body_timeout 12s;
+    client_header_timeout 12s;
+    send_timeout 10s;
+
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_min_length 256;
+    gzip_types
+        text/plain
+        text/css
+        text/xml
+        text/javascript
+        application/json
+        application/javascript
+        application/xml+rss
+        application/atom+xml
+        image/svg+xml;
+    gzip_disable "msie6";
+
+    # Include server blocks
+    include /etc/nginx/conf.d/*.conf;
+}