Update nginx.conf

nginx.conf

@@ -1,39 +1,61 @@
-events {}
+worker_processes 1;
+pid /run/nginx.pid;
+error_log /var/log/nginx/error.log warn;
+
+events {
+  worker_connections 256;
+}
 
 http {
+  access_log /var/log/nginx/access.log;
+  client_body_temp_path /var/lib/nginx/body;
+  proxy_temp_path /var/lib/nginx/proxy;
+
   server {
     listen 7860;
 
-    # Redpanda Console UI → root
-    location / {
-      proxy_pass http://localhost:8080;
+    # ── Redpanda Console UI ──────────────────────────
+    location /ui/ {
+      proxy_pass http://127.0.0.1:8080/ui/;
       proxy_set_header Host $host;
-      proxy_set_header X-Real-IP $remote_addr;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
     }
 
-    # Pandaproxy — Kafka over REST
+    # ── Pandaproxy — Kafka REST API ──────────────────
     location /kafka/ {
       rewrite ^/kafka/(.*) /$1 break;
-      proxy_pass http://localhost:8082;
+      proxy_pass http://127.0.0.1:8082;
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_read_timeout 300s;
+      proxy_send_timeout 300s;
     }
 
-    # Schema Registry
+    # ── Schema Registry ──────────────────────────────
     location /schema/ {
       rewrite ^/schema/(.*) /$1 break;
-      proxy_pass http://localhost:8081;
+      proxy_pass http://127.0.0.1:8081;
       proxy_set_header Host $host;
-      proxy_set_header X-Real-IP $remote_addr;
     }
 
-    # Admin API
+    # ── Admin API ────────────────────────────────────
     location /admin/ {
       rewrite ^/admin/(.*) /$1 break;
-      proxy_pass http://localhost:9644;
+      proxy_pass http://127.0.0.1:9644;
       proxy_set_header Host $host;
-      proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    # ── Health check ─────────────────────────────────
+    location /health {
+      return 200 'ok';
+      add_header Content-Type text/plain;
+    }
+
+    # ── Root → redirect to UI ─────────────────────────
+    location = / {
+      return 301 /ui/;
     }
   }
 }