Robert Helewka c9328c58fc refactor(nginx): overhaul config with dynamic resolution and media serving ...

- Add Docker DNS resolver to prevent stale upstream IPs after container restarts
- Preserve X-Forwarded-Proto from HAProxy for correct HTTPS detection
- Mount mnemosyne-media volume for direct /media/ serving
- Add IP allowlisting for probe/metrics endpoints (RFC1918 + loopback)
- Fix access_log inheritance so probe paths are properly suppressed
- Expand inline documentation covering routing model and conventions

2026-05-04 07:41:15 -04:00

12 KiB

Raw Blame History

View Raw