String-based nginx config validator for fuz_app deploy configs.
Checks consumer NGINX_CONFIG template strings for required security
properties. This is pattern matching on template strings, not a real
nginx parser — it catches common security omissions but won't catch
all possible misconfigurations.
2 declarations
server/validate_nginx.ts view source
NginxValidationResult Result of validating an nginx config template string.
okTrue when no errors were detected. Warnings do not affect this flag.
booleanwarningsNon-fatal issues — missing optional headers, weakened defaults, etc.
Array<string>errorsFatal issues — missing /api block, missing required security headers, etc.
Array<string>server/validate_nginx.ts view source
(config: string): NginxValidationResult Validate an nginx config template string for security properties.
Checks for required security headers, Authorization stripping in /api
blocks, and the nginx add_header inheritance gotcha. Designed for
fuz_app consumer deploy configs (zap.ts NGINX_CONFIG constants).
Limitations: string pattern matching, not a real nginx parser. Catches common omissions in fuz_app deploy configs but won't catch all possible misconfigurations.
configstringNginxValidationResult