Niek Otten
b4c4ffcd19
Scaffold apps/behandel (mirrors self-service): medewerker-realm OIDC login, the werkbak page
listing registrations awaiting beoordeling (GET /behandel/werkbak) with goedkeuren/afwijzen
actions (POST /behandel/registrations/{id}/decide) that refresh the list, plus Dockerfile and
same-origin nginx reverse proxy for /behandel/ (ADR-0013; S-12).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
25 lines
833 B
Nginx Configuration File
25 lines
833 B
Nginx Configuration File
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
# Resolve the BFF via Docker's embedded DNS at request time (variable proxy_pass), so nginx starts
|
|
# even before the BFF is up and picks up restarts — instead of failing to load the config.
|
|
resolver 127.0.0.11 ipv6=off valid=30s;
|
|
|
|
# Same-origin API: proxy the behandel endpoint group to the bff service. The api-client uses
|
|
# relative URLs, so the browser calls this origin and nginx forwards to the BFF — no CORS, and the
|
|
# medewerker token (same-origin) is attached by the app's interceptor (ADR-0013).
|
|
location /behandel/ {
|
|
set $bff http://bff:8080;
|
|
proxy_pass $bff;
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
# SPA fallback — Angular client-side routing.
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
}
|