vincent
4f415fb500
P0 fixes: - Admin API Bearer Token auth middleware - Encryption key missing -> CRITICAL log + sys.exit(1) - Prometheus metrics endpoint (:9191) - requirements.txt + Dockerfile + docker-compose.yml + systemd + nginx P1 fixes: - Dead code removed from _refresh_cooldowns() - Stream detection fixed (text/event-stream only) - Emergency passthrough (10% RPM retry before 503) - Active health probing for backends - SQLite daily backup loop with retention - Chart.js CDN fallback - Key rotation SOP document - JSON log format support - Deploy files: systemd unit + nginx config BIZ-52 review re-entry Co-authored-by: multica-agent <github@multica.ai>
56 lines
1.5 KiB
Plaintext
56 lines
1.5 KiB
Plaintext
# Sidecar V2 — Nginx reverse proxy config (reference)
|
|
# Place at /etc/nginx/sites-available/sidecar-v2.conf
|
|
# SSL certs managed by certbot or manually
|
|
|
|
upstream sidecar_v2_main {
|
|
server 127.0.0.1:9190;
|
|
}
|
|
|
|
upstream sidecar_v2_metrics {
|
|
server 127.0.0.1:9191;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name sidecar.example.com;
|
|
|
|
ssl_certificate /etc/ssl/certs/sidecar.pem;
|
|
ssl_certificate_key /etc/ssl/private/sidecar.key;
|
|
|
|
# Dashboard + Admin API (main port)
|
|
location / {
|
|
proxy_pass http://sidecar_v2_main;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
# SSE support for dashboard real-time data
|
|
location /dashboard/sse {
|
|
proxy_pass http://sidecar_v2_main;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_buffering off;
|
|
proxy_cache off;
|
|
chunked_transfer_encoding off;
|
|
proxy_read_timeout 86400s;
|
|
}
|
|
|
|
# Prometheus metrics
|
|
location /metrics {
|
|
proxy_pass http://sidecar_v2_metrics;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
# Health check
|
|
location /health {
|
|
proxy_pass http://sidecar_v2_main;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
}
|
|
} |