server {
  listen 80;
  server_name _;

  root /usr/share/nginx/html;
  index index.html;

  # Static assets — long cache
  location /assets/ {
    expires 30d;
    add_header Cache-Control "public, immutable";
    try_files $uri =404;
  }

  # API proxy to the backend service (docker-compose internal DNS)
  location /api/ {
    proxy_pass http://crowdlending-backend:4000/api/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_read_timeout 120s;
    client_max_body_size 15M;
  }

  # site.webmanifest — jamais mis en cache (sinon iOS garde l'ancienne
  # config "Add to Home Screen" après un déploiement)
  location = /site.webmanifest {
    add_header Cache-Control "no-cache, no-store, must-revalidate";
    add_header Pragma "no-cache";
  }

  # SPA fallback — index.html ne doit JAMAIS être mis en cache : la webapp
  # installée sur l'écran d'accueil iPad (mode standalone) n'a ni bouton
  # reload ni pull-to-refresh, donc si index.html reste en cache le
  # WKWebView continue de charger l'ancien bundle après un déploiement.
  location / {
    add_header Cache-Control "no-cache, no-store, must-revalidate";
    add_header Pragma "no-cache";
    try_files $uri $uri/ /index.html;
  }
}