Proxy & routing
Use this section for technical routing layers (reverse proxy vhosts, upstreams, and TCP routing).
web.core.lef (reverse proxy) NGINX reverse proxy / public ingress.
NGINX ingress layout (public vs internal) Maintainable listener-separated vhost layout (VIPs vs internal).
NGINX vhost templates Reusable vhost patterns (public VIP + internal listener).
Provision a web ingress proxy Checklist to spin up an additional reverse proxy using the same layout.
Virtual IPs (VIPs) How to add and maintain VIPs on Debian (NGINX ingress + HAProxy DB endpoints).
TCP proxy operations Maintain HAProxy routes and VIPs for `*.db.lef` endpoints.
TCP proxy (facts) Authoritative `*.db.lef` mapping (VIP → backend).
CORS proxy operations Maintain `proxy.coragem.app` safely (avoid open-proxy behavior).
CORS proxy (service) Controlled proxy for browser-based integrations.
API proxy (development) Inbound endpoint used by development environments.