Academiadepolitie.com MCP Server

# Nginx configuration pentru Remote MCP Server # Plasează în /etc/nginx/sites-available/mcp.academiadepolitie.com server { listen 80; server_name mcp.academiadepolitie.com; # Redirect HTTP to HTTPS return 301 https://$server_name$request_uri; } server { listen 443 ssl http2; server_name mcp.academiadepolitie.com; # SSL Configuration (Let's Encrypt) ssl_certificate /etc/letsencrypt/live/mcp.academiadepolitie.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/mcp.academiadepolitie.com/privkey.pem; # SSL Security ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; # Security Headers add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-Frame-Options "DENY" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; # CORS pentru Claude add_header Access-Control-Allow-Origin "https://claude.ai" always; add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always; add_header Access-Control-Allow-Headers "Authorization, Content-Type" always; add_header Access-Control-Allow-Credentials "true" always; # Handle OPTIONS preflight if ($request_method = OPTIONS) { return 204; } # Proxy settings pentru Node.js Remote MCP location / { proxy_pass http://127.0.0.1:3000; proxy_http_version 1.1; # Headers pentru proxying proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # SSE Support (Server-Sent Events) proxy_set_header Connection ''; proxy_buffering off; proxy_cache off; chunked_transfer_encoding off; # Timeouts pentru long-lived connections proxy_connect_timeout 600s; proxy_send_timeout 600s; proxy_read_timeout 600s; # WebSocket support (dacă va fi nevoie) proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } # OAuth endpoints optimization location ~ ^/(auth|\.well-known)/ { proxy_pass http://127.0.0.1:3000; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; # Cache discovery endpoints location ~ ^/\.well-known/ { proxy_cache_valid 200 1h; add_header X-Cache-Status $upstream_cache_status; } } # Health check endpoint location /health { proxy_pass http://127.0.0.1:3000/health; access_log off; } # Rate limiting limit_req_zone $binary_remote_addr zone=mcp_limit:10m rate=10r/s; limit_req zone=mcp_limit burst=20 nodelay; # Logging access_log /var/log/nginx/mcp.academiadepolitie.com.access.log; error_log /var/log/nginx/mcp.academiadepolitie.com.error.log; }