11# ============================================================================
2- # Configuração do Virtual Host - Produção
2+ # Virtual Host Configuration - Production
33# ============================================================================
44#
55# ============================================================================
@@ -10,21 +10,21 @@ server {
1010 server_name localhost;
1111
1212 # ========================================================================
13- # HEADERS DE SEGURANÇA
13+ # SECURITY HEADERS
1414 # ========================================================================
1515 add_header X-Frame-Options "SAMEORIGIN" always;
1616 add_header X-Content-Type-Options "nosniff" always;
1717 add_header X-XSS-Protection "1; mode=block" always;
1818 add_header Referrer-Policy "no-referrer-when-downgrade" always;
1919
20- # Content Security Policy (ajustar conforme necessário )
20+ # Content Security Policy (adjust as needed )
2121 add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
2222
23- # HSTS (descomente quando usar HTTPS)
23+ # HSTS (uncomment when using HTTPS)
2424 # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
2525
2626 # ========================================================================
27- # HEALTHCHECK DO NGINX
27+ # NGINX HEALTHCHECK
2828 # ========================================================================
2929 location /health {
3030 access_log off;
@@ -119,15 +119,15 @@ server {
119119 proxy_pass http://frontend;
120120 proxy_http_version 1.1;
121121
122- # Headers importantes para aplicação
122+ # Important headers for the application
123123 proxy_set_header Host $host;
124124 proxy_set_header X-Real-IP $remote_addr;
125125 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
126126 proxy_set_header X-Forwarded-Proto $scheme;
127127 proxy_set_header X-Forwarded-Host $host;
128128 proxy_set_header X-Forwarded-Port $server_port;
129129
130- # WebSocket support (importante para apps Node.js como Next.js HMR)
130+ # WebSocket support (important for Node.js apps like Next.js HMR)
131131 proxy_set_header Upgrade $http_upgrade;
132132 proxy_set_header Connection "upgrade";
133133
@@ -147,7 +147,7 @@ server {
147147 }
148148
149149 # ========================================================================
150- # ARQUIVOS ESTÁTICOS (se houver )
150+ # STATIC FILES (if any )
151151 # ========================================================================
152152 location /static/ {
153153 alias /usr/share/nginx/html/static/;
@@ -156,7 +156,7 @@ server {
156156 }
157157
158158 # ========================================================================
159- # NEGAÇÃO DE ACESSO A ARQUIVOS SENSÍVEIS
159+ # DENY ACCESS TO SENSITIVE FILES
160160 # ========================================================================
161161 location ~ /\. {
162162 deny all;
@@ -171,7 +171,7 @@ server {
171171 }
172172
173173 # ========================================================================
174- # ERRO PAGES
174+ # ERROR PAGES
175175 # ========================================================================
176176 error_page 404 /404.html;
177177 location = /404.html {
@@ -187,18 +187,18 @@ server {
187187}
188188
189189# ============================================================================
190- # CONFIGURAÇÃO HTTPS (SSL/TLS) - Descomente quando tiver certificados
190+ # HTTPS CONFIGURATION (SSL/TLS) - Uncomment when you have certificates
191191# ============================================================================
192192# server {
193193# listen 443 ssl http2;
194194# listen [::]:443 ssl http2;
195195# server_name localhost;
196196#
197- # # Certificados SSL
197+ # # SSL Certificates
198198# ssl_certificate /etc/nginx/certs/cert.pem;
199199# ssl_certificate_key /etc/nginx/certs/key.pem;
200200#
201- # # Configuração SSL moderna
201+ # # Modern SSL configuration
202202# ssl_protocols TLSv1.2 TLSv1.3;
203203# ssl_ciphers HIGH:!aNULL:!MD5;
204204# ssl_prefer_server_ciphers on;
@@ -209,14 +209,14 @@ server {
209209# ssl_stapling on;
210210# ssl_stapling_verify on;
211211#
212- # # Headers de segurança
212+ # # Security headers
213213# add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
214214#
215- # # ... resto da configuração igual ao server HTTP
215+ # # ... rest of the configuration same as the HTTP server
216216# }
217217
218218# ============================================================================
219- # Redirect HTTP para HTTPS (descomente quando usar SSL)
219+ # Redirect HTTP to HTTPS (uncomment when using SSL)
220220# ============================================================================
221221# server {
222222# listen 80;
0 commit comments