fix: separate public object store TLS

deploy/server/nginx.conf

@@ -18,6 +18,13 @@ server {
 
     add_header Strict-Transport-Security "max-age=31536000" always;
 
+    resolver 127.0.0.11 ipv6=off valid=10s;
+    set $api_backend http://api:8080;
+    set $callbacks_backend http://callbacks:8081;
+    set $keycloak_backend http://keycloak:8080;
+    set $minio_backend http://minio:9000;
+    set $web_backend http://web:8080;
+
     proxy_http_version 1.1;
     proxy_set_header Host $http_host;
     proxy_set_header X-Forwarded-Host $http_host;
@@ -27,36 +34,36 @@ server {
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
     location /api/ {
-        proxy_pass http://api:8080;
+        proxy_pass $api_backend;
         proxy_buffering off;
         proxy_read_timeout 3600s;
     }
 
     location /device/ {
-        proxy_pass http://api:8080;
+        proxy_pass $api_backend;
         proxy_buffering off;
     }
 
     location /callbacks/ {
-        proxy_pass http://callbacks:8081;
+        proxy_pass $callbacks_backend;
         proxy_buffering off;
     }
 
     location /realms/ {
-        proxy_pass http://keycloak:8080;
+        proxy_pass $keycloak_backend;
     }
 
     location /resources/ {
-        proxy_pass http://keycloak:8080;
+        proxy_pass $keycloak_backend;
     }
 
     location /private-exports/ {
-        proxy_pass http://minio:9000;
+        proxy_pass $minio_backend;
         proxy_request_buffering off;
         proxy_buffering off;
     }
 
     location / {
-        proxy_pass http://web:8080;
+        proxy_pass $web_backend;
     }
 }