Initial commit

templates/nginx.conf.j2

@@ -0,0 +1,58 @@
+worker_processes auto;
+pid /tmp/nginx.pid;
+error_log /dev/stderr warn;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    access_log /dev/stdout;
+    sendfile on;
+    server_tokens off;
+    client_body_temp_path /tmp/client_temp;
+    proxy_temp_path /tmp/proxy_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+    scgi_temp_path /tmp/scgi_temp;
+
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        '' close;
+    }
+    map $uri $cache_control {
+        default "no-cache";
+        "~^/[0-9a-f]{12}/" "public, max-age=31536000, immutable";
+    }
+
+    server {
+        listen 8080;
+        root /usr/share/nginx/html;
+        index index.html;
+
+        add_header Cross-Origin-Opener-Policy same-origin always;
+        add_header Cross-Origin-Embedder-Policy require-corp always;
+        add_header X-Content-Type-Options nosniff always;
+        add_header Cache-Control $cache_control always;
+
+        location = /proxy {
+            proxy_pass http://127.0.0.1:7777;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_set_header Host $host;
+            proxy_read_timeout {{ luanti_wasm_websocket_timeout_seconds }}s;
+            proxy_send_timeout {{ luanti_wasm_websocket_timeout_seconds }}s;
+            proxy_buffering off;
+        }
+
+        location / {
+            try_files $uri $uri/ =404;
+        }
+        location ~ /\. {
+            deny all;
+        }
+    }
+}