Skip to content

📁 NGINX Gateway

🔐 Security Notes

  • TLS/SSL termination must not be configured in NGINX
  • No certificates, private keys, or SSL configs are stored in this repository
  • HTTPS, certificates, and renewals are handled by Azure App Service Certificate Manager
  • NGINX operates over internal HTTP only
  • (TLS managed by Azure App Service)
gateway-nginx/
│
├─ docs/                                # Gateway documentation
│  ├─ overview.md                       # Gateway purpose and responsibilities
│  ├─ routing.md                        # Routing rules and upstream design
│  ├─ security.md                       # Security headers, auth, rate limiting (NO TLS)
│  ├─ observability.md                  # Logging, metrics and monitoring
│  └─ deployment.md                     # Deployment on Azure App Service
│
├─ tests/                               # Gateway tests
│  ├─ smoke-tests/                      # Basic routing and availability tests
│  ├─ security-tests/                   # Headers, CORS and rate limit validation
│  └─ performance-tests/                # Basic load and stress tests
│
├─ nginx/                               # NGINX configuration
│  ├─ nginx.conf                        # Main NGINX configuration file
│  │
│  ├─ conf.d/                           # Modular included configurations
│  │  ├─ upstreams.conf                 # Backend service definitions
│  │  ├─ routes.conf                    # Routing rules
│  │  ├─ security.conf                  # Security headers configuration
│  │  ├─ cors.conf                      # CORS configuration
│  │  └─ rate-limit.conf                # Rate limiting rules
│  │
│  └─ snippets/                         # Reusable configuration blocks
│     ├─ proxy-headers.conf             # Standard proxy headers to backends
│     └─ logging.conf                   # Log format definitions
│
├─ Dockerfile                           # NGINX container image definition
└─ README.md                            # Gateway entry point and usage