deploy: prepare permanent HTTPS MetaBloom API

server/docker-compose.example.yml

@@ -1,6 +1,7 @@
 services:
   api:
     build: .
+    restart: unless-stopped
     environment:
       DATABASE_URL: postgresql+psycopg://metabloom:${POSTGRES_PASSWORD}@db:5432/metabloom
       JWT_SECRET: ${JWT_SECRET}
@@ -17,6 +18,7 @@ services:
     networks: [default, ai-company]
   db:
     image: postgres:16-alpine
+    restart: unless-stopped
     environment:
       POSTGRES_DB: metabloom
       POSTGRES_USER: metabloom

server/openresty.metabloom.conf.example

@@ -0,0 +1,18 @@
+# À intégrer au serveur OpenResty public après création du DNS et du certificat TLS.
+server {
+    listen 443 ssl http2;
+    server_name api.metabloom.vicode.agency;
+
+    # Les directives ssl_certificate sont gérées par l'infrastructure existante.
+
+    location / {
+        proxy_pass http://127.0.0.1:8000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_connect_timeout 5s;
+        proxy_read_timeout 120s;
+    }
+}