fix: nginx serves uploaded assets directly, docker volumes for all public dirs

docker-compose.yml

@@ -59,8 +59,6 @@ services:
       SMTP_SECURE: ${SMTP_SECURE}
       NODE_ENV: production
     volumes:
-
-
       - ./public/footage:/app/public/footage
       - ./public/applications:/app/public/applications
       - ./public/cases:/app/public/cases
@@ -84,6 +82,12 @@ services:
       - ./nginx/conf.d:/etc/nginx/conf.d:ro
       - ./certbot/conf:/etc/letsencrypt:ro
       - ./certbot/www:/var/www/certbot:ro
+      - ./public/cases:/srv/cases:ro
+      - ./public/applications:/srv/applications:ro
+      - ./public/news:/srv/news:ro
+      - ./public/parts:/srv/parts:ro
+      - ./public/footage:/srv/footage:ro
+      - ./public/operations-inbox:/srv/operations-inbox:ro
     depends_on:
       - app
     networks:

nginx/conf.d/flux.conf

@@ -43,13 +43,6 @@ server {
         access_log off;
     }
 
-    location /footage/ {
-        proxy_pass http://nextjs;
-        expires 30d;
-        add_header Cache-Control "public";
-        access_log off;
-    }
-
     location /hq-command/login {
         limit_req zone=login burst=10 nodelay;
         proxy_pass http://nextjs;
@@ -59,6 +52,31 @@ server {
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
+# Asset uploads (large files, long timeout)
+    location /api/assets {
+        client_max_body_size 500M;
+        proxy_pass http://nextjs;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 600s;
+        proxy_send_timeout 600s;
+        proxy_request_buffering off;
+    }
+
+    location /api/public-upload {
+        client_max_body_size 500M;
+        proxy_pass http://nextjs;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 600s;
+        proxy_send_timeout 600s;
+        proxy_request_buffering off;
+    }   
+
     location /hq-command/ {
         proxy_pass http://nextjs;
         proxy_set_header Host $host;
@@ -86,6 +104,49 @@ server {
         access_log off;
     }
     
+    # Serve uploaded assets directly from disk (bypass Next.js)
+
+    location /cases/ {
+        alias /srv/cases/;
+        expires 30d;
+        add_header Cache-Control "public";
+        access_log off;
+    }
+
+    location /applications/ {
+        alias /srv/applications/;
+        expires 30d;
+        add_header Cache-Control "public";
+        access_log off;
+    }
+
+    location /news/ {
+        alias /srv/news/;
+        expires 30d;
+        add_header Cache-Control "public";
+        access_log off;
+    }
+
+    location /parts/ {
+        alias /srv/parts/;
+        expires 30d;
+        add_header Cache-Control "public";
+        access_log off;
+    }
+
+    location /operations-inbox/ {
+        alias /srv/operations-inbox/;
+        expires 7d;
+        access_log off;
+    }
+
+    location /footage/ {
+        alias /srv/footage/;
+        expires 30d;
+        add_header Cache-Control "public";
+        access_log off;
+    }
+
     location / {
         proxy_pass http://nextjs;
         proxy_set_header Host $host;