Build local product stack with Vault-managed secrets (#42)

dev/config/nginx.conf

@@ -0,0 +1,17 @@
+server {
+    listen 8443 ssl;
+    ssl_certificate /etc/tls/server.crt;
+    ssl_certificate_key /etc/tls/server.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    root /usr/share/nginx/html;
+    index index.html;
+    location /api/ {
+        resolver 127.0.0.11 valid=10s ipv6=off;
+        set $bff http://bff:8082;
+        proxy_pass $bff;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-For $remote_addr;
+    }
+    location / { try_files $uri $uri/ /index.html; }
+}