Coupons vhost: /internal/ is never proxied (the Events webhook is loopback-only). (#12)

OP OpenVibers committed 7 Oct 2026 · 2576a2cd29 · 1 file, +3 −0

- `deploy/nginx/openvibe.coupons.conf:99` — added `location /internal/ { return 404; }` (with the same comment style as OpenVibe.News) before the catch-all `location /`.
- `deploy/nginx/openvibe.coupons.conf:100` — `location = /metrics { return 404; }` was already present; left it, now immediately after the new block.
- No test reads `deploy/` or the vhost (grep of `test/` for `nginx`/`vhost`/`sites-available`/`deploy` is empty), so no test to extend.

Tests: `nice -n 15 ov test --no-cache test/events.test.js` → 1 passed in 9 s (the only test file covering the referenced `/internal/events` route; it exercises the app, not nginx). `nginx -t` unavailable — checked by reading against `OpenVibe.News/deploy/nginx/openvibe.news.conf:97`, whose block is identical in directive and placement. No commit/push.

Changes

ddiff --git a/deploy/nginx/openvibe.coupons.conf b/deploy/nginx/openvibe.coupons.conf
iindex 5fc2d89..8f6cc82 100644
---- a/deploy/nginx/openvibe.coupons.conf
++++ b/deploy/nginx/openvibe.coupons.conf
@@@ -96,6 +96,9 @@ server {
          proxy_pass http://127.0.0.1:4850;
      }
  
++    # ── The Events webhook: OpenVibe.Events delivers over loopback, never through the public vhost ──
++    location /internal/ { return 404; }
++
      # ── Prometheus metrics: host-local scrapers only (http://127.0.0.1:4850/metrics) ──
      location = /metrics { return 404; }