server {
    listen 8080;
    server_name _;

    root /usr/share/nginx/html;
    index index.html;

    # Trust RFC1918 reverse proxies for X-Forwarded-For
    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 172.16.0.0/12;
    set_real_ip_from 192.168.0.0/16;
    real_ip_header X-Forwarded-For;
    real_ip_recursive on;

    # Access log to stdout (Docker best practice)
    access_log /dev/stdout combined;
    error_log  /dev/stderr warn;

    location / {
        try_files $uri $uri/ /index.html;
    }

    # Cache static assets aggressively
    location /assets/ {
        expires 1y;
        add_header Cache-Control "public, immutable";
    }
}