Replace remote with local repo

This commit is contained in:
drjones
2026-04-26 22:28:40 -07:00
parent 04d64fb993
commit e7c9da944e
57 changed files with 3658 additions and 3971 deletions

View File

@@ -1,10 +1,10 @@
# CyberLux — hub + generated entry onions (see nginx/cyberlux-onion-servers.inc).
# CyberLux — single onion ingress.
# Request handling: lib/onionRoutes.generated.ts + proxy.ts (Next.js 16+)
#
# Hub: 127.0.0.1:8080 — no X-Cyberlux-Node (full app)
# Other loopback ports: see scripts/onion-nodes.json → scripts/generate-onion-config.cjs
# Hub: 127.0.0.1:8080 — full app, all sections as paths
#
# Requires /etc/nginx/cyberlux-server-common.inc and /etc/nginx/cyberlux-onion-servers.inc
# Requires /etc/nginx/conf.d/cyberlux-ddos-zones.conf
# and /etc/nginx/cyberlux-server-common.inc
# (installed by scripts/install-tor-onion.sh).
# --- HUB (main storefront) ---
@@ -17,7 +17,28 @@ server {
client_max_body_size 25m;
# ── Next.js static assets — long cache, NO rate limiting ──────────────────
# These are content-hashed immutable files. Rate-limiting them causes the
# Tor Browser to silently drop CSS/JS on first load (burst exhausted by the
# HTML request before assets arrive).
location /_next/static/ {
proxy_pass http://127.0.0.1:3000;
proxy_http_version 1.1;
proxy_set_header Host 127.0.0.1;
proxy_set_header X-Forwarded-Proto http;
add_header Cache-Control "public, max-age=31536000, immutable" always;
access_log off;
}
# ── App routes — rate limited ─────────────────────────────────────────────
location / {
# Tor forwards every onion client from loopback, so zones are keyed
# by $server_port to avoid collapsing all visitors into one bucket.
limit_req zone=cyberlux_onion_req burst=120 nodelay;
limit_conn cyberlux_onion_conn 60;
limit_req_status 429;
limit_conn_status 429;
proxy_pass http://127.0.0.1:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
@@ -30,5 +51,3 @@ server {
proxy_read_timeout 86400;
}
}
include /etc/nginx/cyberlux-onion-servers.inc;