feat: release toolbox portal 0.1.0

deploy/nginx.conf

@@ -0,0 +1,42 @@
+map $uri $toolbox_cache_control {
+  default "no-cache";
+  ~^/(?:.*/)?assets/.*-[A-Za-z0-9_-]{8,}\.[^/]+$ "public, max-age=31536000, immutable";
+}
+
+server {
+  listen 8080;
+  listen [::]:8080;
+  server_name _;
+  root /usr/share/nginx/html;
+
+  server_tokens off;
+  charset utf-8;
+  etag on;
+
+  add_header X-Content-Type-Options "nosniff" always;
+  add_header Referrer-Policy "no-referrer" always;
+  add_header X-Frame-Options "DENY" always;
+  add_header Cross-Origin-Opener-Policy "same-origin" always;
+  add_header Cross-Origin-Embedder-Policy "require-corp" always;
+  add_header Cross-Origin-Resource-Policy "same-origin" always;
+  add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
+  add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
+  add_header Cache-Control $toolbox_cache_control always;
+
+  gzip on;
+  gzip_vary on;
+  gzip_min_length 1024;
+  gzip_types application/json application/javascript application/wasm image/svg+xml text/css text/plain text/xml;
+
+  location ~* /(?:toolbox\.catalog|toolbox\.release|toolbox-app)\.json$ {
+    try_files $uri =404;
+  }
+
+  location ~* \.(?:css|js|mjs|wasm|woff2?|png|jpe?g|gif|webp|svg|ico|webmanifest)$ {
+    try_files $uri =404;
+  }
+
+  location / {
+    try_files $uri $uri/ =404;
+  }
+}