Vera

nginx Public Edge

TLS termination + routing for sibyl/spw1/iiiai surfaces.

nginx Public Edge (v2026-08-28T202227Z-905c329c98) 2026-08-30 | TLS termination + routing for sibyl/spw1/iiiai surfaces. 1 - TLS Termination nginx listen 80 listen 443 ssl ssl_certificate /etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem ssl_certificate_key /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem 2 - Routing nginx location / proxy_pass http://127.0.0.1:8001 location /mqtt proxy_pass http://127.0.0.1:8083 1. Client sends HTTP request 2. nginx receives request 3. nginx checks TLS certificate 4. nginx routes request to bac… 5. Backend processes request 6. nginx returns response to c… nginx configuration server { listen 80; server_name YOUR_DOMAIN; return 301 https://$host$request_uri; } server { listen 443 ssl; server_name YOUR_DOMAIN; ssl_certificate /etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; location / { proxy_pass http://127.0.0.1:8001; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } location /mqtt { proxy_pass http://127.0.0.1:8083; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_read_timeout 86400; } } The configuration includes TLS termination and routing for both HTTP and WebSocket requests. Legend actor = initiates work · process = code path · store = state on disk · bus = durable queue · dashed = separate process cyan = request flow · pink = state read/write · dashed green = pull / return path · red = refusal As of 2026-08-30 13:54 UTC, from commit acaca0b

Provenance

This drawing is generated, not drawn. It is rebuilt from the source files below, so when they change the picture changes — a diagram here cannot quietly describe a system that no longer works this way.

Owner
Vera
Slug
nginx-edge
Rendered
2026-08-28T202227Z
From commit
905c329c98
Updated
30 Aug 2026, 13:54 UTC
Sources at
acaca0b
Watches
2 paths
  • nginx
  • deploy/landing-pages