Skip to content

Commit 8039733

Browse files
KevenWMarkhamKevenWMarkham
committed
fix(deployment): add nginx config with FFmpeg.wasm CORS headers
Adds missing nginx configuration files required by docker-compose.yml. Includes critical CORS headers for FFmpeg.wasm SharedArrayBuffer support. Changes: - Add nginx/nginx.conf (main config) - Add nginx/conf.d/default.conf (SSL config with CORS headers) - Add nginx/conf.d/http-only.conf.disabled (pre-SSL fallback) - Add deployment instructions Fixes: - 403 Forbidden error (nginx misconfiguration) - FFmpeg.wasm "nodejs not supported" error (missing CORS headers) - Docker compose nginx volume mount failures Required headers for FFmpeg.wasm: - Cross-Origin-Opener-Policy: same-origin - Cross-Origin-Embedder-Policy: require-corp - Cross-Origin-Resource-Policy: cross-origin
1 parent e754c20 commit 8039733

File tree

4 files changed

+226
-11
lines changed

4 files changed

+226
-11
lines changed

‎DEPLOY_THIS_ONE.txt‎

Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
================================================================================
2+
*** USE THIS PACKAGE: transcript-parser-FIXED.tar.gz ***
3+
================================================================================
4+
5+
WHAT WAS WRONG:
6+
1. FFmpeg.wasm trying to load during Node.js build ✅ FIXED
7+
2. App built for /transcript-parser/ instead of root ✅ FIXED
8+
3. Missing nginx configuration files ✅ FIXED
9+
4. Missing CORS headers for FFmpeg.wasm ✅ FIXED
10+
11+
WHAT'S IN THIS PACKAGE:
12+
✅ FFmpeg Docker build fix (externalized dependencies)
13+
✅ Built for root domain (/)
14+
✅ Complete nginx configuration with FFmpeg.wasm headers
15+
✅ SSL-ready nginx config
16+
✅ Temporary HTTP-only config for initial setup
17+
✅ Auto-deploy script
18+
✅ All tests passing
19+
20+
================================================================================
21+
QUICK DEPLOY (15 minutes)
22+
================================================================================
23+
24+
1. UPLOAD
25+
scp transcript-parser-FIXED.tar.gz root@72.62.86.210:/tmp/
26+
27+
2. SSH TO SERVER
28+
ssh root@72.62.86.210
29+
30+
3. EXTRACT AND RUN DEPLOY SCRIPT
31+
cd /tmp
32+
tar -xzf transcript-parser-FIXED.tar.gz quick-deploy.sh
33+
chmod +x quick-deploy.sh
34+
./quick-deploy.sh
35+
36+
4. GET SSL CERTIFICATES (if first time)
37+
cd /var/www/smarthaven
38+
39+
# Main domain
40+
docker compose run --rm certbot certonly --webroot \
41+
--webroot-path=/var/www/certbot \
42+
--email your@email.com \
43+
--agree-tos \
44+
--no-eff-email \
45+
-d smarthavenai.com \
46+
-d www.smarthavenai.com
47+
48+
# N8N subdomain
49+
docker compose run --rm certbot certonly --webroot \
50+
--webroot-path=/var/www/certbot \
51+
--email your@email.com \
52+
--agree-tos \
53+
--no-eff-email \
54+
-d n8n.smarthavenai.com
55+
56+
# Restart nginx to use certificates
57+
docker compose restart nginx
58+
59+
5. TEST
60+
Visit https://smarthavenai.com
61+
Upload a video
62+
Should work perfectly!
63+
64+
================================================================================
65+
KEY FIX: NGINX HEADERS
66+
================================================================================
67+
68+
The nginx config now includes these CRITICAL headers for FFmpeg.wasm:
69+
70+
Cross-Origin-Opener-Policy: same-origin
71+
Cross-Origin-Embedder-Policy: require-corp
72+
Cross-Origin-Resource-Policy: cross-origin
73+
74+
Without these, FFmpeg.wasm cannot use SharedArrayBuffer and fails with
75+
"ffmpeg.wasm does not support nodejs" (misleading error message).
76+
77+
================================================================================
78+
FILES INCLUDED
79+
================================================================================
80+
81+
nginx/
82+
├── nginx.conf # Main nginx config
83+
└── conf.d/
84+
├── default.conf # SSL/HTTPS config with FFmpeg headers
85+
└── http-only.conf.disabled # Temporary HTTP-only config
86+
87+
================================================================================
88+
89+
🚀 READY TO DEPLOY: transcript-parser-FIXED.tar.gz (13 MB)
90+
91+
This will fix your 403 error and FFmpeg.wasm loading issue!
92+
93+
================================================================================

‎nginx/conf.d/default.conf‎

Lines changed: 100 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,100 @@
1+
# Main Application - smarthavenai.com
2+
server {
3+
listen 80;
4+
server_name smarthavenai.com www.smarthavenai.com;
5+
6+
# Let's Encrypt validation
7+
location /.well-known/acme-challenge/ {
8+
root /var/www/certbot;
9+
}
10+
11+
# Redirect HTTP to HTTPS
12+
location / {
13+
return 301 https://$host$request_uri;
14+
}
15+
}
16+
17+
server {
18+
listen 443 ssl http2;
19+
server_name smarthavenai.com www.smarthavenai.com;
20+
21+
# SSL Configuration
22+
ssl_certificate /etc/letsencrypt/live/smarthavenai.com/fullchain.pem;
23+
ssl_certificate_key /etc/letsencrypt/live/smarthavenai.com/privkey.pem;
24+
ssl_protocols TLSv1.2 TLSv1.3;
25+
ssl_ciphers HIGH:!aNULL:!MD5;
26+
ssl_prefer_server_ciphers on;
27+
28+
# Security Headers
29+
add_header X-Frame-Options "SAMEORIGIN" always;
30+
add_header X-Content-Type-Options "nosniff" always;
31+
add_header X-XSS-Protection "1; mode=block" always;
32+
33+
# CRITICAL: Headers for FFmpeg.wasm (SharedArrayBuffer support)
34+
add_header Cross-Origin-Opener-Policy "same-origin" always;
35+
add_header Cross-Origin-Embedder-Policy "require-corp" always;
36+
add_header Cross-Origin-Resource-Policy "cross-origin" always;
37+
38+
# Proxy to app container
39+
location / {
40+
proxy_pass http://app:3000;
41+
proxy_http_version 1.1;
42+
proxy_set_header Upgrade $http_upgrade;
43+
proxy_set_header Connection 'upgrade';
44+
proxy_set_header Host $host;
45+
proxy_set_header X-Real-IP $remote_addr;
46+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
47+
proxy_set_header X-Forwarded-Proto $scheme;
48+
proxy_cache_bypass $http_upgrade;
49+
proxy_read_timeout 300s;
50+
proxy_connect_timeout 75s;
51+
}
52+
}
53+
54+
# N8N - n8n.smarthavenai.com
55+
server {
56+
listen 80;
57+
server_name n8n.smarthavenai.com;
58+
59+
# Let's Encrypt validation
60+
location /.well-known/acme-challenge/ {
61+
root /var/www/certbot;
62+
}
63+
64+
# Redirect HTTP to HTTPS
65+
location / {
66+
return 301 https://$host$request_uri;
67+
}
68+
}
69+
70+
server {
71+
listen 443 ssl http2;
72+
server_name n8n.smarthavenai.com;
73+
74+
# SSL Configuration
75+
ssl_certificate /etc/letsencrypt/live/n8n.smarthavenai.com/fullchain.pem;
76+
ssl_certificate_key /etc/letsencrypt/live/n8n.smarthavenai.com/privkey.pem;
77+
ssl_protocols TLSv1.2 TLSv1.3;
78+
ssl_ciphers HIGH:!aNULL:!MD5;
79+
ssl_prefer_server_ciphers on;
80+
81+
# Security Headers
82+
add_header X-Frame-Options "SAMEORIGIN" always;
83+
add_header X-Content-Type-Options "nosniff" always;
84+
add_header X-XSS-Protection "1; mode=block" always;
85+
86+
# Proxy to N8N container
87+
location / {
88+
proxy_pass http://n8n:5678;
89+
proxy_http_version 1.1;
90+
proxy_set_header Upgrade $http_upgrade;
91+
proxy_set_header Connection 'upgrade';
92+
proxy_set_header Host $host;
93+
proxy_set_header X-Real-IP $remote_addr;
94+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
95+
proxy_set_header X-Forwarded-Proto $scheme;
96+
proxy_cache_bypass $http_upgrade;
97+
proxy_read_timeout 300s;
98+
proxy_connect_timeout 75s;
99+
}
100+
}

‎nginx/conf.d/http-only.conf.disabled‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# TEMPORARY CONFIG - Use this before SSL certificates are obtained
2+
# After getting certificates, disable this file and enable default.conf
3+
4+
server {
5+
listen 80;
6+
server_name smarthavenai.com www.smarthavenai.com n8n.smarthavenai.com;
7+
8+
# Let's Encrypt validation
9+
location /.well-known/acme-challenge/ {
10+
root /var/www/certbot;
11+
}
12+
13+
# Main app
14+
location / {
15+
proxy_pass http://app:3000;
16+
proxy_http_version 1.1;
17+
proxy_set_header Upgrade $http_upgrade;
18+
proxy_set_header Connection 'upgrade';
19+
proxy_set_header Host $host;
20+
proxy_set_header X-Real-IP $remote_addr;
21+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
22+
proxy_set_header X-Forwarded-Proto $scheme;
23+
proxy_cache_bypass $http_upgrade;
24+
25+
# CRITICAL: Headers for FFmpeg.wasm
26+
add_header Cross-Origin-Opener-Policy "same-origin" always;
27+
add_header Cross-Origin-Embedder-Policy "require-corp" always;
28+
add_header Cross-Origin-Resource-Policy "cross-origin" always;
29+
}
30+
}

‎nginx/nginx.conf‎

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5,41 +5,33 @@ pid /var/run/nginx.pid;
55

66
events {
77
worker_connections 1024;
8-
use epoll;
98
}
109

1110
http {
1211
include /etc/nginx/mime.types;
1312
default_type application/octet-stream;
1413

15-
# Logging
1614
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
1715
'$status $body_bytes_sent "$http_referer" '
1816
'"$http_user_agent" "$http_x_forwarded_for"';
1917

2018
access_log /var/log/nginx/access.log main;
2119

22-
# Performance
2320
sendfile on;
2421
tcp_nopush on;
2522
tcp_nodelay on;
2623
keepalive_timeout 65;
2724
types_hash_max_size 2048;
28-
client_max_body_size 100M; # Allow large file uploads
25+
client_max_body_size 500M; # Allow large video uploads
2926

30-
# Gzip compression
3127
gzip on;
32-
gzip_disable "msie6";
3328
gzip_vary on;
3429
gzip_proxied any;
3530
gzip_comp_level 6;
3631
gzip_types text/plain text/css text/xml text/javascript
3732
application/json application/javascript application/xml+rss
38-
application/atom+xml image/svg+xml;
39-
40-
# Rate limiting
41-
limit_req_zone $binary_remote_addr zone=general:10m rate=10r/s;
42-
limit_req_status 429;
33+
application/rss+xml font/truetype font/opentype
34+
application/vnd.ms-fontobject image/svg+xml;
4335

4436
# Include site configurations
4537
include /etc/nginx/conf.d/*.conf;

0 commit comments

Comments
 (0)