Initial commit, prod ready

nginx.conf

@@ -0,0 +1,43 @@
+server {
+    listen 80;
+    server_name _;   # accept requests by IP — fine for local network
+
+    # ── Frontend (React build) ─────────────────────────────────────────
+    root /opt/music-orchestrator/frontend/dist;
+    index index.html;
+
+    # React Router: unknown paths fall back to index.html
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # ── API (FastAPI backend) ──────────────────────────────────────────
+    location /api/ {
+        proxy_pass         http://127.0.0.1:8000;
+        proxy_http_version 1.1;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+
+        # Downloads can take a while — don't time out too early
+        proxy_read_timeout  600s;
+        proxy_send_timeout  600s;
+
+        # Don't buffer file downloads through nginx memory
+        proxy_buffering off;
+
+        # Allow large upload/download bodies (for file transfers)
+        client_max_body_size 0;
+    }
+
+    # ── Compression ────────────────────────────────────────────────────
+    gzip on;
+    gzip_types text/plain text/css application/javascript application/json image/svg+xml;
+    gzip_min_length 1024;
+
+    # ── Static asset caching ───────────────────────────────────────────
+    location ~* \.(js|css|png|jpg|jpeg|svg|ico|woff2?)$ {
+        expires 7d;
+        add_header Cache-Control "public, immutable";
+    }
+}