6601: Updated nginx configuration

Author: cableman

infrastructure/display-api-service/Dockerfile

@@ -1,5 +1,5 @@
 ################################
-# Assets build 
+# Assets build
 ################################
 FROM --platform=$BUILDPLATFORM node:24-alpine AS assets_builder
 LABEL maintainer="ITK Dev <itkdev@mkb.aarhus.dk>"
@@ -45,7 +45,7 @@ RUN rm -rf package* vite.config.js
 
 
 ################################
-# PHP-FPM (API) production image 
+# PHP-FPM (API) production image
 ################################
 FROM --platform=$BUILDPLATFORM itkdev/php8.4-fpm:alpine
 LABEL maintainer="ITK Dev <itkdev@mkb.aarhus.dk>"
@@ -65,6 +65,9 @@ ENV APP_ENV=prod \
 
 # Install the api application.
 COPY --chown=deploy:deploy --from=api_app_builder /app .
-RUN mkdir -p ./config/secrets
+
+# Symfony settings (warmup required to make vite assets work corretly)
+RUN mkdir -p ./config/secrets \
+    bin/console cache:warmup
 
 CMD [ "docker-entrypoint.sh" ]

infrastructure/nginx/etc/templates/default.conf.template

@@ -1,8 +1,3 @@
-upstream api_backend {
-    server ${NGINX_FPM_SERVICE};
-    keepalive 16;
-}
-
 server {
     listen ${NGINX_PORT};
     listen [::]:${NGINX_PORT};
@@ -27,7 +22,7 @@ server {
     add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 
     # Real IP from reverse proxy
-    set_real_ip_from ${NGINX_SET_REAL_IP_FROM};
+    set_real_ip_from ${NGINX_SET_REAL_IP_FROM:-172.16.0.0/16};
     real_ip_recursive on;
     real_ip_header X-Forwarded-For;
 
@@ -63,7 +58,7 @@ server {
 
     # Screen client online check should just serve static files
     location /client/online-check {
-        index index.html index.htm;
+        index index.html;
     }
 
     location = /robots.txt {
@@ -98,7 +93,7 @@ server {
 
     # PHP-FPM handling
     location ~ ^/index\.php(/|$) {
-        fastcgi_pass api_backend;
+        fastcgi_pass ${NGINX_FPM_SERVICE}:${NGINX_FPM_PORT};
         fastcgi_split_path_info ^(.+\.php)(/.*)$;
         include fastcgi_params;
 
@@ -126,7 +121,6 @@ server {
         return 404;
     }
 
-    # Send log message to files symlinked to stdout/stderr.
     sendfile        on;
     keepalive_timeout  65;