5402: Align nginx image env-var contract

Finalize the nginx image's operator-facing env-var surface so the
compose side has a single name per concept:

  NGINX_FPM_SERVICE=os2display       (host only — was host:port combined)
  NGINX_FPM_PORT=9000                (new — was embedded in NGINX_FPM_SERVICE)
  NGINX_PORT=8080                    (unchanged)
  NGINX_MAX_BODY_SIZE=140m           (was 10m)
  NGINX_SET_REAL_IP_FROM=172.16.0.0/12 (was 172.17.0.0/16)

The /16 → /12 widening covers the full RFC1918 docker bridge range
(172.16-172.31), so multi-network compose stacks no longer need to
override the default. The 140m upload cap matches the planned
PHP_POST_MAX_SIZE / NGINX_MAX_BODY_SIZE alignment for media uploads.

The production template's upstream block now references
${NGINX_FPM_SERVICE}:${NGINX_FPM_PORT} explicitly.

The dev compose stack uses its own template under .docker/templates/
and is unaffected by this change.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: turegjorup

CHANGELOG.md

@@ -37,6 +37,8 @@ All notable changes to this project will be documented in this file.
 - Added vitest for frontend unit tests.
 - Updated infrastructure and image build for mono-repo.
 - Fixed nginx static-file location to fall back to PHP so LiipImagineBundle can generate missing thumbnails (#370).
+- Aligned the nginx image env-var contract: split `NGINX_FPM_SERVICE` and
+  `NGINX_FPM_PORT`, raised upload cap and trusted-proxy CIDR defaults.
 
 ### NB! Prior to 3.x the project was split into separate repositories
 

infrastructure/nginx/Dockerfile

@@ -71,8 +71,10 @@ ARG GID=101
 ENV APP_CLIENT_PATH=/app \
     APP_API_PATH=/var/www/html \
     NGINX_PORT=8080 \
-    NGINX_SET_REAL_IP_FROM=172.17.0.0/16 \
-    NGINX_MAX_BODY_SIZE=10m
+    NGINX_FPM_SERVICE=os2display \
+    NGINX_FPM_PORT=9000 \
+    NGINX_MAX_BODY_SIZE=140m \
+    NGINX_SET_REAL_IP_FROM=172.16.0.0/12
 
 WORKDIR ${APP_API_PATH}
 

infrastructure/nginx/etc/templates/default.conf.template

@@ -1,5 +1,5 @@
 upstream api_backend {
-    server ${NGINX_FPM_SERVICE};
+    server ${NGINX_FPM_SERVICE}:${NGINX_FPM_PORT};
     keepalive 16;
 }