add nginx conf in code, setup gh actions to deploy nginx conf

Author: ahmedkhaleel2004

Diff for: .github/workflows/deploy.yml

@@ -29,5 +29,7 @@ jobs:
             cd ~/gitdiagram
             git fetch origin main
             git reset --hard origin/main  # Force local to match remote main
-            chmod +x ./backend/deploy.sh  # Make the script executable
+            sudo chmod +x ./backend/nginx/setup_nginx.sh
+            sudo ./backend/nginx/setup_nginx.sh
+            chmod +x ./backend/deploy.sh
             ./backend/deploy.sh

Diff for: backend/app/main.py

@@ -9,8 +9,6 @@
 from api_analytics.fastapi import Analytics
 import os
 
-from time import sleep
-
 
 app = FastAPI()
 app.state.limiter = limiter
@@ -43,9 +41,3 @@
 @limiter.limit("100/day")
 async def root(request: Request):
     return {"message": "Hello from GitDiagram API!"}
-
-
-@app.get("/slow")
-async def slow(request: Request):
-    sleep(120)
-    return {"message": "slow"}

Diff for: backend/entrypoint.sh

@@ -7,7 +7,7 @@ if [ "$ENVIRONMENT" = "development" ]; then
     exec uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
 elif [ "$ENVIRONMENT" = "production" ]; then
     echo "Starting in production mode with multiple workers..."
-    exec uvicorn app.main:app --host 0.0.0.0 --port 8000 --workers 2
+    exec uvicorn app.main:app --host 0.0.0.0 --port 8000 --timeout-keep-alive 300 --workers 2
 else
     echo "ENVIRONMENT must be set to either 'development' or 'production'"
     exit 1

Diff for: backend/nginx/api.conf

@@ -0,0 +1,34 @@
+server {
+    server_name api.gitdiagram.com;
+
+    location / {
+        proxy_pass http://127.0.0.1:8000;  # Forward to FastAPI
+        include proxy_params;
+        proxy_redirect off;
+    }
+
+    # Add timeout settings
+    proxy_connect_timeout 300;
+    proxy_send_timeout 300;
+    proxy_read_timeout 300;
+    send_timeout 300;
+
+    # todo: stop weird requests from being made
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/api.gitdiagram.com/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/api.gitdiagram.com/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = api.gitdiagram.com) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name api.gitdiagram.com;
+    return 404; # managed by Certbot
+}

Diff for: backend/nginx/setup_nginx.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+# Exit on any error
+set -e
+
+# Check if running as root
+if [ "$EUID" -ne 0 ]; then 
+    echo "Please run as root or with sudo"
+    exit 1
+fi
+
+# Copy Nginx configuration
+echo "Copying Nginx configuration..."
+cp ./api.conf /etc/nginx/sites-available/api
+ln -sf /etc/nginx/sites-available/api /etc/nginx/sites-enabled/
+
+# Test Nginx configuration
+echo "Testing Nginx configuration..."
+nginx -t
+
+# Reload Nginx
+echo "Reloading Nginx..."
+systemctl reload nginx
+
+echo "Nginx configuration updated successfully!"