worker_processes auto; events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; server_tokens off; # Gzip — para HTML, CSS, JS, JSON gzip on; gzip_vary on; gzip_proxied any; gzip_comp_level 6; gzip_min_length 256; gzip_types text/plain text/css text/xml text/javascript application/javascript application/json application/xml+rss application/xhtml+xml image/svg+xml; # Cache de imágenes — las fotos del pueblo no cambian proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=img_cache:10m max_size=100m inactive=7d use_temp_path=off; server { listen 80; listen [::]:80; server_name zenon.tera.coop.ar www.zenon.tera.coop.ar _; root /usr/share/nginx/html; index index.html; # Charset UTF-8 (acentos, ñ, etc.) charset utf-8; # Logs access_log /dev/stdout; error_log /dev/stderr warn; # Headers de seguridad básicos add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; # Cache largo para assets de build de Astro (tienen hash en el nombre) location /_astro/ { expires 1y; add_header Cache-Control "public, immutable"; access_log off; } # Cache para imágenes del pueblo location /img/ { expires 30d; add_header Cache-Control "public"; access_log off; } # Astro genera /tramites/ como carpeta con index.html # Aseguramos que cualquier ruta sin extensión caiga al index del folder location / { try_files $uri $uri/index.html $uri.html =404; } # Página de error 404 con link a home error_page 404 /404.html; location = /404.html { internal; try_files $uri =404; } # No loggear favicon ni robots location = /favicon.ico { access_log off; log_not_found off; } location = /robots.txt { access_log off; log_not_found off; } } }