Сделал деплой

nginx/nginx.conf

@@ -1,39 +1,39 @@
-events {
-    worker_connections 1024;
+upstream django {
+    server web:8000;
 }
 
-http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
+server {
+    listen 80;
+    server_name _;
 
-    # Log format
-    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
-                    '$status $body_bytes_sent "$http_referer" '
-                    '"$http_user_agent" "$http_x_forwarded_for"';
+    proxy_connect_timeout 300s;
+    proxy_send_timeout    300s;
+    proxy_read_timeout    300s;
+    send_timeout          300s;
+    # Максимальный размер тела запроса, например для загрузки файлов
+    client_max_body_size 200m;
 
-    access_log /var/log/nginx/access.log main;
-    error_log  /var/log/nginx/error.log;
+    # Статические файлы (статика Django)
+    location /static/ {
+        alias /usr/share/nginx/html/static/;   # ← тут путь в контейнере nginx, куда монтируется том со static
+        expires 30d;
+        add_header Cache-Control "public, max-age=2592000";
+    }
 
-    # Security headers
-    add_header X-Frame-Options "SAMEORIGIN" always;
-    add_header X-Content-Type-Options "nosniff" always;
-    add_header Referrer-Policy "no-referrer-when-downgrade" always;
-    add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
+    # Медиа-файлы, если есть MEDIA_URL
+    location /media/ {
+        alias /usr/share/nginx/media/;   # путь, куда монтируется media-том
+        expires 30d;
+        add_header Cache-Control "public, max-age=2592000";
+    }
 
-    # Proxy settings
-    proxy_set_header Host $http_host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_set_header X-Forwarded-Host $server_name;
-
-    # Gzip compression
-    gzip on;
-    gzip_vary on;
-    gzip_min_length 1024;
-    # gzip_proxied expired no-cache no-store private must-revalidate auth;
-    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
-
-    # Include server blocks
-    include /etc/nginx/conf.d/*.conf;
-}
+    # Прокси для всех остальных запросов на Django (асинхронный / uvicorn или gunicorn)
+    location / {
+        proxy_pass http://django;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_redirect off;
+    }
+}