# Nginx Configuration

<!-- BOOKSTACK-DOCUMENT-RELEASE:BEGIN -->
# Nginx Configuration

| Field | Value |
| --- | --- |
| Distribution | WCT English — OpenC5ISR |
| Product | OpenC5ISR |
| Release | 0.15.1 |
| Deployment | `openc5isr-en.wallacecorptech.com` |
| Source | `/srv/wct/releases/OpenC5ISR-v0.15.0` |
| Evidence | Release and readable host Nginx configuration |
| Source fingerprint | `63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50` |
| Status | Generated baseline — human review required |

> **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment.

## Observed proxy configuration

| Evidence | server_name | listen | location | proxy_pass |
| --- | --- | --- | --- | --- |
| `/etc/nginx/sites-available/openc5isr-en.wallacecorptech.com` | openc5isr-en.wallacecorptech.com<br>openc5isr-en.wallacecorptech.com | 443 ssl<br>[::]:443 ssl ipv6only=on<br>80<br>[::]:80 | / | `http://127.0.0.1:3101/` |

## Proxy requirements

- Terminate TLS with a valid certificate and redirect clear-text HTTP to HTTPS.
- Preserve Host, X-Real-IP, X-Forwarded-For and X-Forwarded-Proto headers.
- Configure WebSocket upgrade headers on real-time routes.
- Set upload/body/time limits deliberately for imagery, video, files and long-running analytics.
- Keep each distribution hostname mapped to its intended service/port; test routing after every release.
- Run nginx -t before reload and retain the last-known-good configuration.

## Verification commands

```bash
sudo nginx -t
sudo systemctl reload nginx
curl -I https://openc5isr-en.wallacecorptech.com/
```
<!-- BOOKSTACK-DOCUMENT-RELEASE:END -->

---

## Maintainer Notes

<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-BEGIN -->
Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.
<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-END -->