feat(nginx): add hardened nginx app with security improvements

- Rate limiting (10 req/s per IP, burst 20) - Modern security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) - Request body size limits (50m) - Fixed header inheritance bug in static files location block - Removed unused form fields (NGINX_INTERNAL_PORT, NGINX_ENABLE_ACCESS_LOG) - SSL handled by Runtipi reverse proxy Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 11:00:24 +01:00
parent 698bccf49d
commit 430f6e2baa
10 changed files with 422 additions and 0 deletions
--- a/apps/nginx/data/html/index.html
+++ b/apps/nginx/data/html/index.html
@@ -0,0 +1,110 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Nginx Custom - Runtipi</title>
+    <style>
+        * {
+            margin: 0;
+            padding: 0;
+            box-sizing: border-box;
+        }
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, sans-serif;
+            background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            color: #e4e4e7;
+        }
+        .container {
+            text-align: center;
+            padding: 2rem;
+            max-width: 600px;
+        }
+        .logo {
+            font-size: 4rem;
+            margin-bottom: 1rem;
+        }
+        h1 {
+            font-size: 2.5rem;
+            margin-bottom: 0.5rem;
+            background: linear-gradient(90deg, #4ade80, #22d3ee);
+            -webkit-background-clip: text;
+            -webkit-text-fill-color: transparent;
+        }
+        .subtitle {
+            color: #a1a1aa;
+            margin-bottom: 2rem;
+        }
+        .card {
+            background: rgba(255, 255, 255, 0.05);
+            border: 1px solid rgba(255, 255, 255, 0.1);
+            border-radius: 12px;
+            padding: 1.5rem;
+            margin-bottom: 1rem;
+            text-align: left;
+        }
+        .card h3 {
+            color: #4ade80;
+            margin-bottom: 0.5rem;
+        }
+        .card code {
+            background: rgba(0, 0, 0, 0.3);
+            padding: 0.2rem 0.5rem;
+            border-radius: 4px;
+            font-size: 0.9rem;
+        }
+        .paths {
+            margin-top: 1rem;
+            font-size: 0.9rem;
+        }
+        .paths li {
+            list-style: none;
+            padding: 0.3rem 0;
+            border-bottom: 1px solid rgba(255, 255, 255, 0.05);
+        }
+        .paths li:last-child {
+            border-bottom: none;
+        }
+        .badge {
+            display: inline-block;
+            background: #22d3ee;
+            color: #1a1a2e;
+            padding: 0.2rem 0.6rem;
+            border-radius: 20px;
+            font-size: 0.75rem;
+            font-weight: 600;
+            margin-left: 0.5rem;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="logo">🚀</div>
+        <h1>Nginx Custom</h1>
+        <p class="subtitle">Votre serveur Nginx est opérationnel !</p>
+        
+        <div class="card">
+            <h3>📁 Emplacements des fichiers</h3>
+            <ul class="paths">
+                <li><code>/etc/nginx/conf.d/</code> - Configurations des sites</li>
+                <li><code>/var/www/</code> - Contenu de vos sites</li>
+                <li><code>/usr/share/nginx/html/</code> - Dossier HTML par défaut</li>
+                <li><code>/var/log/nginx/</code> - Logs</li>
+            </ul>
+        </div>
+
+        <div class="card">
+            <h3>🛠️ Prochaines étapes</h3>
+            <p>Remplacez cette page par votre propre contenu dans le dossier <code>app-data</code> de Runtipi.</p>
+        </div>
+
+        <p style="margin-top: 2rem; color: #71717a; font-size: 0.85rem;">
+            Nginx <span class="badge">latest</span> • Runtipi App
+        </p>
+    </div>
+</body>
+</html>