Correções Nginx — 2026-06-19

Problema 1: Auth 502 (IP errado + path mismatch)

Causa: nginx /auth/v1/ apontava pra 172.23.0.3 (imgproxy, não responde) e o GoTrue só aceita /token não /auth/v1/token

Fix:

`nginx

/etc/nginx/sites-enabled/rochasales.conf

location /auth/v1/ {

proxy_pass http://172.23.0.7:9999/; # trailing / strippa /auth/v1 do path

}

`

Problema 2: Rest 401 Unauthorized (JWT signature mismatch)

Causa: nginx /rest/v1/ apontava pra 127.0.0.1:3002 (PostgREST direto sem JWT validation via Kong)

Fix:

`nginx

Adicionar upstream Kong:

upstream kong {

server 172.23.0.10:8000;

}

location /rest/v1/ {

proxy_pass http://kong; # Kong valida JWT corretamente

}

location /storage/v1/ {

proxy_pass http://kong;

}

location /functions/v1/ {

proxy_pass http://kong; # antes apontava pro IP errado 172.23.0.5 (Meta)

}

`

IPs reais dos containers (Docker deploy-vps):