feat(app): implement Product Scan review flow, dynamic batch expiry picker, custom PDFs, PO relationships, and aligned card layouts

backend/nginx.conf

@@ -35,61 +35,6 @@ http {
             proxy_send_timeout 300s;
         }
 
-        # Route to Next.js Web App for backward compatibility and Cloudflare loop bypass
-        location /do-pfm {
-            proxy_pass http://paddleocr-pfm-web-app:3000;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-            proxy_read_timeout 300s;
-            proxy_send_timeout 300s;
-        }
-
-        location /m-do-pfm {
-            proxy_pass http://paddleocr-pfm-web-app:3000;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-            proxy_read_timeout 300s;
-            proxy_send_timeout 300s;
-        }
-
-        location /scan-pfm {
-            proxy_pass http://paddleocr-pfm-web-app:3000;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-            proxy_read_timeout 300s;
-            proxy_send_timeout 300s;
-        }
-
-        location /m-scan-pfm {
-            proxy_pass http://paddleocr-pfm-web-app:3000;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-            proxy_read_timeout 300s;
-            proxy_send_timeout 300s;
-        }
-
-        location /produk-pfm {
-            proxy_pass http://paddleocr-pfm-web-app:3000;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-            proxy_read_timeout 300s;
-            proxy_send_timeout 300s;
-        }
 
         location /history {
             proxy_pass http://paddleocr-pfm-web-app:3000;
@@ -179,4 +124,28 @@ http {
             proxy_send_timeout 300s;
         }
     }
+
+    server {
+        listen 8001;
+        server_name _;
+
+        client_max_body_size 0;
+
+        # Secure public endpoint — only allow API v1 surface
+        location /api/v1/ {
+            proxy_pass http://paddleocr-pfm-web-app:3000/api/v1/;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+            proxy_read_timeout 300s;
+            proxy_send_timeout 300s;
+        }
+
+        # Deny everything else
+        location / {
+            return 404;
+        }
+    }
 }