TehRiehlBudget/tehriehlbudget-frontend/nginx.conf

server {
    listen 8080;
    server_name _;
    root /usr/share/nginx/html;
    index index.html;

    # Compress text-ish assets on the fly
    gzip on;
    gzip_types text/plain text/css text/javascript application/javascript application/json image/svg+xml;
    gzip_min_length 1024;

    # nginx's bundled mime.types in this image still maps `.mjs` to
    # application/octet-stream, which browsers refuse to execute as a module
    # (especially with X-Content-Type-Options: nosniff). Force the JS MIME
    # type for any `.mjs` so module workers / dynamic imports work.
    location ~* \.mjs$ {
        types { } default_type text/javascript;
        add_header Cache-Control "public, max-age=31536000, immutable" always;
        try_files $uri =404;
    }

    # Block dotfiles served from the static root
    location ~ /\. {
        deny all;
    }

    # Runtime config is rewritten at every container start; never cache it
    location = /config.js {
        add_header Cache-Control "no-store" always;
        try_files $uri =404;
    }

    # index.html must always be revalidated so a deploy is picked up
    location = /index.html {
        add_header Cache-Control "no-store" always;
        try_files $uri =404;
    }

    # Vite emits hashed filenames into /assets — safe to cache aggressively
    location /assets/ {
        add_header Cache-Control "public, max-age=31536000, immutable" always;
        try_files $uri =404;
    }

    # SPA fallback: route everything else through index.html
    location / {
        try_files $uri $uri/ /index.html;
    }
}