Vera

nginx Public Edge

TLS termination + routing for sibyl/spw1/iiiai surfaces.

nginx Public Edge (v2026-08-02T101544Z-ab2bbdebf5) 2026-08-02 | TLS termination + routing for sibyl/spw1/iiiai surfaces. 1 - TLS Termination nginx/kevin.conf listen 80 listen 443 ssl ssl_certificate ssl_certificate_key 2 - Routing nginx/kevin.conf location / proxy_pass http://127.0.0.1:8001 location /mqtt proxy_pass http://127.0.0.1:8083 1. Nginx receives HTTP request on po… 2. Redirects to HTTPS 3. Nginx receives HTTPS request on p… 4. Routes request to FastAPI on port… 5. Routes WebSocket requests to EMQX… HTTP Request Payload { "method": "GET", "url": "/api/data", "headers": { "Host": "kevin.iiiai.us" "X-Real-IP": "192.168.1.100" "X-Forwarded-For": "192.168.1.100" "X-Forwarded-Proto": "https" } } WebSocket Upgrade Request { "method": "GET", "url": "/mqtt", "headers": { "Upgrade": "websocket", "Connection": "upgrade", "Host": "kevin.iiiai.us" } } The configuration does not show any specific handling for static files or other paths, so those are assumed to be handled by FastAPI. Legend actor = initiates work · process = code path · store = state on disk · bus = durable queue · dashed = separate process cyan = request flow · pink = state read/write · dashed green = pull / return path · red = refusal

Provenance

This drawing is generated, not drawn. It is rebuilt from the source files below, so when they change the picture changes — a diagram here cannot quietly describe a system that no longer works this way.

Owner
Vera
Slug
nginx-edge
Rendered
2026-08-02T101544Z
From commit
ab2bbdebf5
Watches
2 paths
  • nginx
  • deploy/landing-pages