nginx.conf.template with HTTPS redirects + Cache‑Control

nginx.conf.template

# Force HTTPS using Azure's X-Forwarded-Proto header
server {
    listen 80;

    # Redirect HTTP → HTTPS
    if ($http_x_forwarded_proto = "http") {
        return 301 https://$host$request_uri;
    }

    # Alias domains → primary domain (HTTPS)
    server_name ${ALIAS_DOMAINS};
    return 301 https://${PRIMARY_DOMAIN}$request_uri;
}

server {
    listen 80;

    # Redirect HTTP → HTTPS for primary domain
    if ($http_x_forwarded_proto = "http") {
        return 301 https://$host$request_uri;
    }

    server_name ${PRIMARY_DOMAIN};
    root /usr/share/nginx/html;
    index index.html;

    # Long-term caching for hashed static assets
    location ~* \.(js|css|png|jpg|jpeg|gif|svg|ico|webp|woff|woff2|ttf|eot)$ {
        add_header Cache-Control "public, max-age=31536000, immutable";
        try_files $uri =404;
    }

    # Prevent caching of index.html (SPA entry point)
    location = /index.html {
        add_header Cache-Control "no-cache, no-store, must-revalidate";
        try_files $uri =404;
    }

    # SPA fallback
    location / {
        try_files $uri $uri/ /index.html;
    }
}