chore: nginx runtime proxy + startup script to forward /api to backend; support SSE; ignore tmp/

Author: mbertelsen

nginx.conf

@@ -5,6 +5,8 @@ events {
 http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
+    # Allow additional runtime-injected virtual host fragments (created by /startup.sh)
+    include /etc/nginx/conf.d/*.conf;
 
     server {
         listen 80;

startup.sh

@@ -79,6 +79,36 @@ fi
 
 echo "✅ Runtime configuration setup complete!"
 
+# Create an api-proxy config so the container can forward /api requests to the real backend
+echo "📡 Creating API proxy config (/etc/nginx/conf.d/api-proxy.conf)"
+cat > /etc/nginx/conf.d/api-proxy.conf << EOF
+# Dynamically generated by startup.sh - proxies /api/* to the backend provided by VITE_BACKEND_BASE_URL
+proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=one:10m max_size=100m inactive=60m;
+upstream backend_api {
+  server ${VITE_BACKEND_BASE_URL};
+}
+
+server {
+  listen 127.0.0.1:8080; # internal server used for proxy fragment only
+
+  # Proxy any /api requests to the configured backend. This preserves SSE
+  location /api/ {
+    proxy_pass ${VITE_BACKEND_BASE_URL}/api/;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_http_version 1.1;
+    proxy_set_header Connection '';
+    proxy_buffering off; # important for SSE
+    chunked_transfer_encoding off;
+    proxy_cache_bypass $http_upgrade;
+    proxy_read_timeout 3600s;
+    proxy_send_timeout 3600s;
+  }
+}
+EOF
+echo "✅ Wrote /etc/nginx/conf.d/api-proxy.conf"
+
 # Start nginx
 echo "🌐 Starting nginx..."
 exec nginx -g "daemon off;"