chore(deploy): Docker-образы, compose, deploy.sh, setup-nginx.sh

2026-10-17 15:48:19 +03:00
parent e2d85a28ef
commit 79ab146b1d
8 changed files with 565 additions and 0 deletions
@@ -0,0 +1,42 @@
+# /etc/nginx/sites-available/kvarta.unuchak.com (ставит deploy/setup-nginx.sh)
+# Только 80-й порт: certbot --nginx сам допишет 443-блок и редирект.
+server {
+    listen 80;
+    listen [::]:80;
+    server_name kvarta.unuchak.com;
+
+    # заявка — это небольшой JSON; всё крупнее отсекаем ещё на nginx
+    client_max_body_size 32k;
+
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 5;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css text/xml application/javascript application/json
+               application/xml application/rss+xml image/svg+xml application/manifest+json;
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:13121;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:13120;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+}