Yargı MCP

events { worker_connections 1024; } http { upstream yargi_mcp { server yargi-mcp:8000; } # Rate limiting limit_req_zone $binary_remote_addr zone=api_limit:10m rate=10r/s; limit_req_zone $binary_remote_addr zone=mcp_limit:10m rate=100r/s; server { listen 80; server_name localhost; # Redirect HTTP to HTTPS in production # return 301 https://$server_name$request_uri; # Security headers add_header X-Content-Type-Options nosniff; add_header X-Frame-Options DENY; add_header X-XSS-Protection "1; mode=block"; add_header Referrer-Policy "strict-origin-when-cross-origin"; # API endpoints location /api/ { limit_req zone=api_limit burst=20 nodelay; proxy_pass http://yargi_mcp; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # Timeouts proxy_connect_timeout 60s; proxy_send_timeout 60s; proxy_read_timeout 60s; } # MCP endpoint (higher rate limit) location /mcp-server/mcp/ { limit_req zone=mcp_limit burst=50 nodelay; proxy_pass http://yargi_mcp; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # WebSocket support proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; # Longer timeouts for MCP operations proxy_connect_timeout 300s; proxy_send_timeout 300s; proxy_read_timeout 300s; } # Health check (no rate limit) location /health { proxy_pass http://yargi_mcp; proxy_set_header Host $host; } # Root and other paths location / { limit_req zone=api_limit burst=10 nodelay; proxy_pass http://yargi_mcp; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } } # SSL configuration (uncomment for production) # server { # listen 443 ssl http2; # server_name your-domain.com; # # ssl_certificate /etc/nginx/ssl/cert.pem; # ssl_certificate_key /etc/nginx/ssl/key.pem; # ssl_protocols TLSv1.2 TLSv1.3; # ssl_ciphers HIGH:!aNULL:!MD5; # # # Include all location blocks from above # } }