Weather MCP Service

events { worker_connections 1024; } http { upstream weather_backend { server weather-server:3000; } # Rate limiting limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s; limit_req_zone $binary_remote_addr zone=mcp:10m rate=5r/s; server { listen 80; server_name localhost; # Security headers add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block"; # API routes with rate limiting location /api/ { limit_req zone=api burst=20 nodelay; proxy_pass http://weather_backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } # MCP endpoint with stricter rate limiting location /mcp { limit_req zone=mcp burst=10 nodelay; proxy_pass http://weather_backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } # Root endpoint location / { proxy_pass http://weather_backend; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } } }