nginx.conf

server {
  listen 443 ssl;
  server_name gotcha.ai.kr;

  ssl_certificate /etc/letsencrypt/live/gotcha.ai.kr/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/gotcha.ai.kr/privkey.pem;

  root /usr/share/nginx/html;
  index index.html;

  # React SPA 라우팅
  location / {
    try_files $uri /index.html;
  }

  # REST API 프록시 (내부 통신 HTTP)
  location /api/ {
    proxy_pass http://app:8080/;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  # WebSocket 프록시 (STOMP / SockJS)
  location /ws-connect/ {
    proxy_pass http://app:8080/;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
  }
}

# HTTP 접근 시 HTTPS로 리다이렉트
server {
  listen 80;
  server_name gotcha.ai.kr;
  return 301 https://$host$request_uri;
}