From 73c939e75b82c73725cb6259d8e6a525a855ea3b Mon Sep 17 00:00:00 2001
From: magdo <m.donat@mdnd-it.hu>
Date: Tue, 25 Nov 2025 18:29:30 +0100
Subject: [PATCH] Update deployment files with nginx volume mount

---
 .../deployment/docker-compose.deploy.yml      |  6 +-
 SerpentRace_Docker/deployment/nginx.conf      | 60 +++++++++++++++++++
 2 files changed, 64 insertions(+), 2 deletions(-)
 create mode 100644 SerpentRace_Docker/deployment/nginx.conf

diff --git a/SerpentRace_Docker/deployment/docker-compose.deploy.yml b/SerpentRace_Docker/deployment/docker-compose.deploy.yml
index 7a5d8e2f..5975ec0d 100644
--- a/SerpentRace_Docker/deployment/docker-compose.deploy.yml
+++ b/SerpentRace_Docker/deployment/docker-compose.deploy.yml
@@ -3,7 +3,7 @@ version: '3.8'
 services:
   # Backend service using pre-built image
   backend:
-    image: serpentrace-backend:latest
+    image: serpentrace_docker-backend:latest
     container_name: serpentrace-backend
     restart: unless-stopped
     ports:
@@ -53,12 +53,14 @@ services:
 
   # Frontend service using pre-built image
   frontend:
-    image: serpentrace-frontend:latest
+    image: serpentrace_docker-frontend:latest
     container_name: serpentrace-frontend
     restart: unless-stopped
     ports:
       - "80:80"
       - "443:443"
+    volumes:
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
     depends_on:
       - backend
     networks:
diff --git a/SerpentRace_Docker/deployment/nginx.conf b/SerpentRace_Docker/deployment/nginx.conf
new file mode 100644
index 00000000..fa4630a8
--- /dev/null
+++ b/SerpentRace_Docker/deployment/nginx.conf
@@ -0,0 +1,60 @@
+server {
+    listen 80;
+    server_name localhost;
+    root /usr/share/nginx/html;
+    index index.html index.htm;
+
+    # Enable gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+
+    # Handle client routing
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # API proxy to backend
+    location /api/ {
+        proxy_pass http://backend:3000/;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+
+    # WebSocket support
+    location /socket.io/ {
+        proxy_pass http://backend:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # Static assets caching
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Health check endpoint
+    location /health {
+        access_log off;
+        return 200 "healthy\n";
+        add_header Content-Type text/plain;
+    }
+}