working with login and building inventory

This commit is contained in:
2026-11-12 11:40:31 -07:00
parent d11e5e70c7
commit 0a93925e11
45 changed files with 2389 additions and 77 deletions

View File

@@ -8,18 +8,27 @@ server {
# API and health checks are proxied to the backend container on the
# shared podman network (service DNS name: backend).
#
# X-Real-IP and X-Forwarded-Proto are set here (not passed through), so the
# backend can trust them for login throttling and redirect/scheme decisions.
location /api/ {
proxy_pass http://backend:8000;
proxy_set_header Host $host;
# $http_host keeps the client's port, which the backend's Origin check
# compares against; $host would drop ":8080" and reject real browsers.
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host;
proxy_connect_timeout 5s;
proxy_read_timeout 30s;
}
location = /healthz {
proxy_pass http://backend:8000;
proxy_set_header Host $host;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host;
}
location / {