Files
CurrenciCombo/nginx.conf

29 lines
656 B
Nginx Configuration File
Raw Normal View History

PR Z: sandbox deployment scaffolding (deploy script + Dockerfiles + compose) - contracts/scripts/deploy-notary-registry.ts: self-compiling ethers v6 deploy for NotaryRegistry.sol (solc-js in-process — avoids hardhat's HH1006 on contracts/node_modules), with NOTARY_DRY_RUN mode and a machine-readable JSON envelope as last stdout line. - contracts/hardhat.config.ts: chain138 network (RPC defaults to the public endpoint that resolves EXT-CHAIN138-CI-RPC). - orchestrator/Dockerfile: multi-stage node:20-alpine build, non-root user, dumb-init, /health HEALTHCHECK on :8080. - Dockerfile (root, portal): multi-stage vite build → nginx:1.27-alpine, VITE_ORCHESTRATOR_URL baked at build time. - nginx.conf: SPA fallback + long-cache /assets, sourcemaps denied. - docker-compose.yml: full sandbox stack (postgres 15 + redis 7 + orchestrator + portal), all secrets parameterised via env_file. - .env.sandbox.example: template with EXT-* blocker env vars documented and CHAIN_138_RPC_URL defaulting to the resolved public endpoint. - .dockerignore: excludes node_modules, artifacts, cache, terraform, k8s. - orchestrator/src/config/env.ts: emptyToUndefined() preprocess so zod optional regex fields validate empty-string identically to unset (fixes docker-compose NOTARY_REGISTRY_ADDRESS= sandbox booting). Headless smoke test on this box: - docker compose --env-file .env.sandbox up -d → all 4 containers reported Healthy. - curl /ready → {"ready":true} - curl portal / → HTTP 200 with correct <title>. - orchestrator boot log prints all 7 EXT-* IDs (6 active, 1 resolved). - /health returns 503 on this particular builder because memory is 'critical' — DB + Redis both 'up'; this is environment-specific and not caused by PR Z. Unit: 13 suites / 167 tests still pass after env.ts preprocess change. Co-Authored-By: Nakamoto, S <defi@defi-oracle.io>
2026-04-22 22:18:20 +00:00
server {
listen 80;
server_name _;
# Static SPA — vite build output lives here.
root /usr/share/nginx/html;
index index.html;
# Long-cache hashed assets produced by vite's rollup chunks.
location /assets/ {
access_log off;
expires 1y;
add_header Cache-Control "public, max-age=31536000, immutable";
try_files $uri =404;
}
# SPA fallback — every other path yields index.html so client-side
# react-router can take over (see src/App.tsx / <Routes>).
location / {
try_files $uri $uri/ /index.html;
}
# Defensive: no sourcemap exposure in sandbox.
location ~ \.map$ {
deny all;
return 404;
}
}