Files
Achmad 4cab047432 Slice 2: port 3452, nginx sandbox mount, AGENTS.md, docs, deploy script cleanup
- control-plane default listen addr is now :3452 (was :8080). An
  unusual port to avoid collisions on the VM.
- agent-micro and agent-gateway default SDP_CP_URL points at
  ws://localhost:3452/ws/agent. docker-compose.yml updates the
  control plane command, host port mapping, and agent -cp URLs.
- nginx/nginx.conf (the legacy root-mount reference) uses
  127.0.0.1:3452 for the upstream. nginx/sandbox.conf is the new
  deployment config: four location blocks for the /sandbox/credit-card
  mount — _next/static serves cached chunks, /api/ and /ws/ proxy
  to 127.0.0.1:3452, /sandbox/credit-card serves the static
  dashboard with try_files for SPA routing.
- scripts/patch-nginx.sh: deleted. The user configures nginx on 186
  by hand. scripts/deploy.sh no longer calls it.
- AGENTS.md: new file. Documents the build/lint/test commands
  (with the golang:1.24-alpine container — local Go can't fetch
  the toolchain), the wire protocol, the Slice-2 conventions
  (sdp-<repo> container naming, snapshot persistence,
  PreGitReset/AfterStart hooks), the repo-path gotcha, and the
  build-artifacts-in-git rationale.
- dashboard/out: now tracked in git, alongside bin/. The dashboard
  static export is scp'd to 186 on deploy; the VMs have no
  internet so they can't regenerate it. .gitignore comment
  explains this and warns against re-ignoring.
- README.md / REQUIREMENTS.md: status updated to 'Slice 2 done',
  per-feature checklist marked. Erangel repo path corrected to
  /var/www/html/erangel-ocean (was wrongly ~/SDP in earlier docs).
2026-06-24 04:00:49 +00:00

53 lines
1.5 KiB
Nginx Configuration File

# SDP nginx — reference config for serving the dashboard at the host
# root. The actual deployment on 186 mounts the dashboard under
# /sandbox/credit-card; see nginx/sandbox.conf for that.
#
# try_files: any unknown path falls back to /index.html so client-side
# routing works. /api and /ws are matched first and proxied upstream.
upstream control_plane {
server 127.0.0.1:3452;
keepalive 16;
}
server {
listen 80;
server_name _;
# Long-lived WS connections need a generous read timeout.
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# --- API: control plane ---
location /api/ {
proxy_pass http://control_plane;
}
# --- WebSocket: agent + dashboard subscriptions ---
location /ws/ {
proxy_pass http://control_plane;
}
# --- Static dashboard ---
root /var/www/sdp/dashboard/out;
index index.html;
# ponytail: try_files does all the work. _next chunks, images, etc. are
# served as files; unknown paths fall back to /index.html for SPA routing.
location / {
try_files $uri $uri/ $uri.html /index.html;
}
# Cache static assets aggressively; never cache index.html.
location /_next/static/ {
expires 1y;
add_header Cache-Control "public, immutable";
}
}