hotfix: nginx prod setting

Author: dyk-im

.github/workflows/cd-prod.yaml

@@ -97,6 +97,14 @@ jobs:
             cp -f "${DEPLOY_PATH_PROD}/nginx/conf.d/prod.conf" "${DEPLOY_PATH}/nginx/conf.d/prod.conf"
 
             cd "${DEPLOY_PATH}"
+            # Wait until shared nginx is actually running before exec commands.
+            for i in {1..30}; do
+              if docker compose ps --status running nginx | grep -q "nginx"; then
+                break
+              fi
+              sleep 2
+            done
+
             docker compose exec -T nginx nginx -t
             docker compose exec -T nginx nginx -s reload
             docker compose exec -T nginx sh -c "grep -n 'api-prod.muneo.ai.kr\\|risk-detector\\|proxy_read_timeout\\|proxy_request_buffering' /etc/nginx/conf.d/prod.conf || true"

.github/workflows/cd.yaml

@@ -91,6 +91,14 @@ jobs:
             docker compose pull app redis nginx
             docker compose up -d --remove-orphans app redis nginx
 
+            # Wait until nginx is actually running before exec commands.
+            for i in {1..30}; do
+              if docker compose ps --status running nginx | grep -q "nginx"; then
+                break
+              fi
+              sleep 2
+            done
+
             # Apply updated bind-mounted nginx config without recreating container
             docker compose exec -T nginx nginx -t
             docker compose exec -T nginx nginx -s reload

nginx/conf.d/prod.conf

@@ -10,6 +10,8 @@ server {
     http2 on;
 
     server_name api-prod.muneo.ai.kr;
+    resolver 127.0.0.11 ipv6=off valid=10s;
+    set $prod_upstream app-prod:8080;
 
     ssl_certificate /etc/nginx/certs/muneo.ai.kr.pem;
     ssl_certificate_key /etc/nginx/certs/muneo.ai.kr.key;
@@ -18,7 +20,7 @@ server {
 
     # Long-running AI analysis endpoints need higher upstream timeouts than nginx defaults (60s).
     location = /api/v1/risk-detector/analyze {
-        proxy_pass http://app-prod:8080;
+        proxy_pass http://$prod_upstream;
 
         proxy_http_version 1.1;
         proxy_request_buffering off;
@@ -35,7 +37,7 @@ server {
     }
 
     location / {
-        proxy_pass http://app-prod:8080;
+        proxy_pass http://$prod_upstream;
 
         proxy_http_version 1.1;
         proxy_connect_timeout 10s;