chore(runtime): include runtime location fragments; write location-only api-proxy fragment for /api to preserve SSE

Author: mbertelsen

nginx.conf

@@ -5,14 +5,15 @@ events {
 http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
-    # Allow additional runtime-injected virtual host fragments (created by /startup.sh)
-    include /etc/nginx/conf.d/*.conf;
-
     server {
         listen 80;
         server_name localhost;
         root /usr/share/nginx/html;
         index index.html;
+        # Allow additional runtime-injected location fragments (created by /startup.sh)
+        # These fragments should contain only `location` blocks so they are applied
+        # to this server instance (for example: location /api/ { ... }).
+        include /etc/nginx/conf.d/*.conf;
 
         # Handle client-side routing
         location / {

startup.sh

@@ -79,32 +79,26 @@ fi
 
 echo "✅ Runtime configuration setup complete!"
 
-# Create an api-proxy config so the container can forward /api requests to the real backend
-echo "📡 Creating API proxy config (/etc/nginx/conf.d/api-proxy.conf)"
+# Create an api-proxy location fragment so the container can forward /api requests
+# to the real backend. This writes only a `location` block so the fragment can be
+# included inside the main server block defined in nginx.conf.
+echo "📡 Creating API proxy location fragment (/etc/nginx/conf.d/api-proxy.conf)"
 cat > /etc/nginx/conf.d/api-proxy.conf << EOF
 # Dynamically generated by startup.sh - proxies /api/* to the backend provided by VITE_BACKEND_BASE_URL
-proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=one:10m max_size=100m inactive=60m;
-upstream backend_api {
-  server ${VITE_BACKEND_BASE_URL};
-}
-
-server {
-  listen 127.0.0.1:8080; # internal server used for proxy fragment only
-
-  # Proxy any /api requests to the configured backend. This preserves SSE
-  location /api/ {
-    proxy_pass ${VITE_BACKEND_BASE_URL}/api/;
-    proxy_set_header Host $host;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_http_version 1.1;
-    proxy_set_header Connection '';
-    proxy_buffering off; # important for SSE
-    chunked_transfer_encoding off;
-    proxy_cache_bypass $http_upgrade;
-    proxy_read_timeout 3600s;
-    proxy_send_timeout 3600s;
-  }
+location /api/ {
+  # Forward to the backend base url. Note: using a full URL here lets nginx
+  # perform an external proxy pass to the backend host configured at runtime.
+  proxy_pass ${VITE_BACKEND_BASE_URL}/api/;
+  proxy_set_header Host $host;
+  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  proxy_set_header X-Forwarded-Proto $scheme;
+  proxy_http_version 1.1;
+  proxy_set_header Connection '';
+  proxy_buffering off; # important for SSE
+  chunked_transfer_encoding off;
+  proxy_cache_bypass $http_upgrade;
+  proxy_read_timeout 3600s;
+  proxy_send_timeout 3600s;
 }
 EOF
 echo "✅ Wrote /etc/nginx/conf.d/api-proxy.conf"