feat: integrate durable chat voice transport and deployment assets

nginx.conf

@@ -7,6 +7,31 @@ server {
 
     client_max_body_size 16k;
 
+    location /api/attachments {
+        client_max_body_size 20m;
+        proxy_pass http://127.0.0.1:8092;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_read_timeout 120s;
+        proxy_request_buffering off;
+    }
+
+    location ~ ^/api/(artifacts|memory)(/|$) {
+        client_max_body_size 1m;
+        proxy_pass http://127.0.0.1:8092;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_read_timeout 120s;
+    }
+
+    location /api/tasks {
+        client_max_body_size 64k;
+        proxy_pass http://127.0.0.1:8092;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_read_timeout 120s;
+    }
+
     # Public certificate-only onboarding profile lives in the persistent cert
     # mount. Never expose that directory: it also contains the private key.
     location = /hope-server.mobileconfig {
@@ -31,7 +56,9 @@ server {
         proxy_pass http://127.0.0.1:8092/api/;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
-        proxy_read_timeout 30s;
+        proxy_read_timeout 700s;
+        proxy_buffering off;
+        proxy_set_header X-Accel-Buffering no;
     }
 
     location /internal/ {