nginx.conf

# Nginx configuration for Nestogy ERP
# This file should be included in your nginx server block

# Increase buffer sizes to handle large cookies/headers
client_header_buffer_size 16k;
large_client_header_buffers 4 32k;

# Increase body size limit for file uploads
client_max_body_size 100M;

# Proxy settings for reverse proxy scenarios
proxy_buffer_size 128k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;

# FastCGI settings for PHP-FPM
fastcgi_buffer_size 128k;
fastcgi_buffers 4 256k;
fastcgi_busy_buffers_size 256k;

# Additional security headers
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;

# Gzip compression
gzip on;
gzip_vary on;
gzip_min_length 1024;
gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml+rss application/json application/javascript;

# Cache static assets
location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ {
    expires 1y;
    add_header Cache-Control "public, immutable";
}

# Laravel-specific configuration
location / {
    try_files $uri $uri/ /index.php?$query_string;
}

location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt  { access_log off; log_not_found off; }

# Deny access to sensitive files
location ~ /\.(?!well-known).* {
    deny all;
}

location ~ \.php$ {
    fastcgi_pass unix:/var/run/php/php8.4-fpm.sock;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
    include fastcgi_params;
    
    # Increase timeouts for long-running operations
    fastcgi_read_timeout 300;
    fastcgi_send_timeout 300;
}