frontend-park-mail-ru · andrey57x · Dec 3, 2025 · Dec 3, 2025 · Dec 3, 2025 · Dec 3, 2025
diff --git a/.eslintrc.json b/.eslintrc.json
@@ -1,10 +1,14 @@
 {
   "env": { "browser": true, "es2021": true },
-  "extends": "eslint:recommended",
+  "extends": ["eslint:recommended",
+    "plugin:@typescript-eslint/recommended"],
   "parserOptions": { "ecmaVersion": 12, "sourceType": "module" },
   "rules": {
     "no-unused-vars": ["warn"],
     "no-console": ["off"],
-    "semi": ["error","always"]
-  }
+    "semi": ["error","always"],
+    "@typescript-eslint/no-explicit-any": "off",
+    "@typescript-eslint/no-unused-expressions": "off",
+    "@typescript-eslint/no-unused-vars": "off",
+    "no-case-declarations": "off"  }
 }
diff --git a/Dockerfile b/Dockerfile
@@ -2,6 +2,8 @@ FROM node:22-alpine AS builder
 
 WORKDIR /app
 
+RUN apk add --no-cache autoconf automake libtool make tiff jpeg zlib zlib-dev pkgconf nasm file gcc musl-dev
+
 COPY package.json package-lock.json ./
 RUN npm ci
 

diff --git a/index.html b/index.html
@@ -10,6 +10,8 @@
       rel="stylesheet"
     />
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="manifest" href="/manifest.json">
+    <meta name="theme-color" content="#3399FF">
 
   </head>
   <body>

diff --git a/nginx.conf b/nginx.conf
@@ -1,14 +1,94 @@
 server {
     listen 80;
     server_name goose-notes.duckdns.org;
-    # return 301 https://$host$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    server_name goose-notes.duckdns.org;
+
+    client_max_body_size 55M;
+
+    ssl_certificate /etc/letsencrypt/live/goose-notes.duckdns.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/goose-notes.duckdns.org/privkey.pem;
+
+    resolver 127.0.0.11 valid=30s;
+
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_prefer_server_ciphers off;
+
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
 
     root /usr/share/nginx/html;
     index index.html;
-    location / {
-        try_files $uri $uri/ /index.html;
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        expires 1y;
+        add_header Cache-Control "public, no-transform";
+    }
+
+    location /api/ws/ {
+        set $upstream_gateway http://gateway:8080;
+        proxy_pass $upstream_gateway; 
+
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+
+        expires 1y;
+        add_header Cache-Control "public, no-transform";
+    }
+
+    location ^~ /storage/ {
+        set $upstream_minio http://minio:9000;
+        rewrite ^/storage/(.*) /$1 break;
+        proxy_pass $upstream_minio;
+
+        proxy_set_header Host minio:9000;
+
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_http_version 1.1;
+        proxy_set_header Connection "";
     }
+
     location /api/ {
-        proxy_pass http://gateway:8080;
+        set $upstream_gateway http://gateway:8080;
+        proxy_pass $upstream_gateway;
+
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
     }
 }