Add nginx configuration to fix 403 errors on direct links

- Added nginx.conf with proper try_files directive for Docusaurus routing
- Updated docker-compose.yml to mount nginx.conf
- Updated GitHub Actions to deploy nginx.conf alongside docker-compose.yml
- Fixes 403 errors when accessing docs pages directly

Author: Ignacio Van Droogenbroeck

.github/workflows/deploy.yml

@@ -99,12 +99,12 @@ jobs:
           if [ $? -ne 0 ]; then echo "File sync failed"; exit 1; fi
         shell: bash
 
-      - name: Copy docker-compose.yml to server
+      - name: Copy docker-compose.yml and nginx.conf to server
         run: |
           set -x
-          echo "Copying docker-compose.yml to server..."
-          scp docker-compose.yml ${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}:${{ secrets.DEPLOY_PATH }}/
-          if [ $? -ne 0 ]; then echo "Failed to copy docker-compose.yml"; exit 1; fi
+          echo "Copying docker-compose.yml and nginx.conf to server..."
+          scp docker-compose.yml nginx.conf ${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}:${{ secrets.DEPLOY_PATH }}/
+          if [ $? -ne 0 ]; then echo "Failed to copy files"; exit 1; fi
         shell: bash
 
       - name: Deploy docs with Docker Compose

docker-compose.yml

@@ -7,6 +7,7 @@ services:
     restart: unless-stopped
     volumes:
       - /opt/services/docs.basekick.net:/usr/share/nginx/html:ro
+      - /opt/services/docs.basekick.net/nginx.conf:/etc/nginx/conf.d/default.conf:ro
     networks:
       - traefik
     labels:

nginx.conf

@@ -0,0 +1,31 @@
+server {
+    listen 80;
+    server_name docs.basekick.net;
+    root /usr/share/nginx/html/build;
+    index index.html;
+
+    # Enable gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
+
+    # Cache static assets
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Try to serve file directly, fallback to index.html for client-side routing
+    location / {
+        try_files $uri $uri/ $uri.html /404.html;
+    }
+
+    # Disable directory listing
+    autoindex off;
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+}