# Example server block; include inside nginx's http context.
# Only expose behind an HTTPS gateway or restricted internal network.
# Provision /etc/nginx/sfl.htpasswd outside the web root before starting.
server {
    listen 127.0.0.1:8080;
    server_name _;
    root /var/www/sfl-hub/dist;
    index index.html;
    auth_basic "SFL private compliance hub";
    auth_basic_user_file /etc/nginx/sfl.htpasswd;
    types {
        text/html html;
        text/css css;
        application/javascript js mjs;
        application/json json;
        text/plain md txt;
        image/svg+xml svg;
    }
    default_type application/octet-stream;
    add_header X-Content-Type-Options nosniff always;
    add_header Cache-Control "private, no-cache" always;
    location / { try_files $uri $uri/ =404; }
    location ~ /\. { deny all; }
}