nginx_local.conf

server {
    listen 80;
    server_name _;
    
    # Hide nginx version from headers and error pages
    server_tokens off;
    
    # To completely remove "nginx" from Server header, uncomment the following line
    # (requires headers-more-nginx-module to be installed)
    # more_clear_headers 'Server';
    
    # Custom error pages (without nginx branding)
    error_page 403 /403.html;
    error_page 404 /404.html;
    location = /403.html {
        root html;
        internal;
    }
    location = /404.html {
        root html;
        internal;
    }
    
    client_max_body_size 100M;
    
    # Frontend - React App
    location / {
        proxy_pass http://localhost:80;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    
    # Backend API proxy
    location /api/ {
        proxy_pass http://localhost:8000/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        proxy_buffering off;
    }
    
    # Static files
    location /static/ {
        proxy_pass http://localhost:8000/static/;
        expires 1y;
    }
    
    # Media files
    location /media/ {
        proxy_pass http://localhost:8000/media/;
        expires 30d;
    }
    
    # Frontend admin routes - must come before Django admin block
    # These routes are handled by React Router, not Django admin
    location ~ ^/admin/(users|security|settings) {
        proxy_pass http://localhost:80;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    
    # Django admin panel - only accessible from localhost
    # This matches /admin/ but not /admin/users, /admin/security, /admin/settings
    location /admin/ {
        proxy_pass http://localhost:8000/admin/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}