server {
    listen 80;
    listen [::]:80;
    server_name app.monzero.org;

    root /var/www/monzero-app;
    index index.html;

    add_header X-Content-Type-Options nosniff always;
    add_header X-Frame-Options DENY always;
    add_header Referrer-Policy no-referrer always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Content-Security-Policy "default-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'" always;

    location = /api/node/get_info {
        limit_except POST { deny all; }
        proxy_pass http://127.0.0.1:6175/get_info;
        proxy_set_header Content-Type application/json;
        proxy_set_header Host 127.0.0.1;
        proxy_connect_timeout 2s;
        proxy_read_timeout 5s;
    }

    location / {
        try_files $uri $uri/ /index.html;
    }
}