refactor: optimize Dockerfile, NGINX config, and import syntax

Author: andrasbacsai

Dockerfile

@@ -1,5 +1,5 @@
 # Stage 1: Build Stage (oven/bun:1.1.44-alpine, ARM64)
-FROM oven/bun@sha256:de8a253c6b7b2cbde89697a951cc9828e5dbe1c3462abc157a9605db6fbdd6d9 AS builder
+FROM oven/bun:1.1.44-alpine AS builder
 
 # Set working directory and copy necessary files
 WORKDIR /app
@@ -8,11 +8,17 @@ WORKDIR /app
 COPY . .
 
 # Install Git and dependencies, then build the project
-RUN apk update && apk add --no-cache git && \
-    bun install && bun run build
+RUN --mount=type=cache,target=/var/cache/apk \
+    apk update && apk add --no-cache git
+
+RUN --mount=type=cache,target=/root/.bun \
+    --mount=type=cache,target=/root/.cache/bun \
+    bun install
+
+RUN bun run build
 
 # Stage 2: NGINX Unprivileged Setup (1.27.3-alpine-slim, ARM64)
-FROM nginxinc/nginx-unprivileged@sha256:ad8208f59f060b5e49638b15902af1965e2e53dc76395903fecfbee3bb0b9018 AS final
+FROM nginxinc/nginx-unprivileged:1.27.3-alpine-slim AS final
 
 # Set working directory for NGINX and copy built files from the build stage
 WORKDIR /usr/share/nginx/html

docs/.vitepress/config.mts

@@ -2,7 +2,7 @@ import { fileURLToPath, URL } from 'node:url'
 import yaml from 'vite-plugin-yaml'
 import { defineConfig } from 'vitepress'
 import { useSidebar, useOpenapi } from 'vitepress-openapi'
-import spec from '../public/openapi.json' assert { type: 'json' }
+import spec from '../public/openapi.json' with { type: 'json' }
 import container from 'markdown-it-container'
 import { getHighlighter, bundledLanguages } from 'shiki'
 import { join, dirname } from 'node:path'

docs/api-reference/api/operations/[operation].paths.ts

@@ -1,4 +1,4 @@
-import spec from '../../../public/openapi.json' assert { type: 'json' }
+import spec from '../../../public/openapi.json' with { type: 'json' }
 
 export default {
   async paths() {
@@ -17,4 +17,4 @@ export default {
       params: { operation: op }
     }))
   }
-} 
+}

nginx/nginx.conf

@@ -11,42 +11,45 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    # Security headers
-    add_header X-Content-Type-Options nosniff;
-    add_header X-Frame-Options DENY;
-    add_header X-XSS-Protection "1; mode=block";
+    # Basic optimizations
+    sendfile on;
+    tcp_nopush on;
+    keepalive_timeout 65;
+    client_max_body_size 1m;
 
     # Disable server tokens
     server_tokens off;
 
-    # Gzip compression
-    gzip off;
-    gzip_types
-        text/plain
-        application/json
-        application/javascript
-        text/css
-        text/xml
-        application/xml
-        application/xml+rss
-        text/javascript;
-
     # Server block
     server {
         listen 80;
         server_name _;
 
+        # # Static files handling
+        # location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        #     expires 7d;
+        #     add_header Cache-Control "public, no-transform";
+        # }
+
         include /etc/nginx/conf.d/redirects.conf;
 
-        location / {
-            alias /usr/share/nginx/html/docs;
+        location /docs {
+            root /usr/share/nginx/html;
             index index.html;
             try_files $uri $uri/ $uri.html =404;
         }
 
         location = /favicon.ico {
             rewrite ^/favicon.ico$ /docs/favicon.ico;
+            access_log off;
+            log_not_found off;
         }
 
+        # Deny access to hidden files
+        location ~ /\. {
+            deny all;
+            access_log off;
+            log_not_found off;
+        }
     }
 }