feat: Added nginx conf to serve the mcp server

Author: GermanMT

nginx.conf.template

@@ -155,3 +155,62 @@ server {
     limit_conn perip 20;
     limit_conn_status 429;
 }
+
+# --- MCP server ---
+server {
+    listen 80;
+    listen [::]:80;
+    server_name mcp.securechain.dev;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name mcp.securechain.dev;
+
+    # Reutilizamos los mismos certificados de Cloudflare
+    ssl_certificate     /etc/ssl/cf_origin.pem;
+    ssl_certificate_key /etc/ssl/private/cf_origin.key;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_timeout 1d;
+    ssl_session_tickets off;
+
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    # Proxy hacia tu contenedor MCP (ajusta el host/puerto según docker-compose)
+    location / {
+        proxy_pass http://securechain-mcp:8000;
+
+        proxy_http_version 1.1;
+
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Host  $host;
+        proxy_set_header X-Forwarded-Port  $server_port;
+        proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
+
+        proxy_request_buffering on;
+        proxy_buffering on;
+        proxy_read_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_connect_timeout 5s;
+
+        proxy_pass_header Set-Cookie;
+    }
+
+    # Health endpoint específico del MCP
+    location /health {
+        access_log off;
+        return 200 "mcp healthy\n";
+        add_header Content-Type text/plain;
+    }
+}