⚡️ Better wallet + listener nginx conf, faster load time

Author: KONFeature

apps/listener/nginx.conf

@@ -2,6 +2,19 @@ server {
     listen       80;
     server_name  localhost;
 
+    # Enable sendfile for efficient file serving
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+
+    # Cache open file descriptors (improves performance significantly)
+    # inactive=20s means unused files are removed after 20s
+    # This is safe during deployments because each pod has its own cache
+    open_file_cache max=1000 inactive=20s;
+    open_file_cache_valid 30s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors on;
+
     # Use X-Forwarded-Proto from ingress, fallback to $scheme
     set $real_scheme $scheme;
     if ($http_x_forwarded_proto = 'https') {
@@ -12,6 +25,7 @@ server {
     gzip on;
     gzip_vary on;
     gzip_min_length 1024;
+    gzip_comp_level 6;
     gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/x-font-ttf font/opentype image/svg+xml image/x-icon;
 
     # Security headers optimized for iframe-only usage

apps/wallet/nginx.conf

@@ -2,10 +2,24 @@ server {
     listen       80;
     server_name  localhost;
 
+    # Enable sendfile for efficient file serving
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+
+    # Cache open file descriptors (improves performance significantly)
+    # inactive=20s means unused files are removed after 20s
+    # This is safe during deployments because each pod has its own cache
+    open_file_cache max=1000 inactive=20s;
+    open_file_cache_valid 30s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors on;
+
     # Enable gzip compression
     gzip on;
     gzip_vary on;
     gzip_min_length 1024;
+    gzip_comp_level 6;
     gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/x-font-ttf font/opentype image/svg+xml image/x-icon;
 
     # Security headers

infra/gcp/wallet.ts

@@ -157,13 +157,37 @@ export const listenerService = new KubernetesService(
                     image: imageRefs.listener,
                     ports: [{ containerPort: 80 }],
                     resources: {
-                        limits: { cpu: "10m", memory: "64Mi" },
-                        requests: { cpu: "1m", memory: "8Mi" },
+                        limits: { cpu: "100m", memory: "128Mi" },
+                        requests: { cpu: "10m", memory: "32Mi" },
                     },
                     env: Object.entries(walletEnv).map(([name, value]) => ({
                         name,
                         value,
                     })),
+                    // Readiness probe - ensures pod is ready before receiving traffic
+                    readinessProbe: {
+                        httpGet: {
+                            path: "/listener/",
+                            port: 80,
+                        },
+                        initialDelaySeconds: 2,
+                        periodSeconds: 5,
+                        timeoutSeconds: 2,
+                        successThreshold: 1,
+                        failureThreshold: 3,
+                    },
+                    // Liveness probe - restarts pod if nginx crashes
+                    livenessProbe: {
+                        httpGet: {
+                            path: "/listener/",
+                            port: 80,
+                        },
+                        initialDelaySeconds: 10,
+                        periodSeconds: 10,
+                        timeoutSeconds: 2,
+                        successThreshold: 1,
+                        failureThreshold: 3,
+                    },
                 },
             ],
         },
@@ -209,13 +233,37 @@ export const walletService = new KubernetesService(
                     image: imageRefs.wallet,
                     ports: [{ containerPort: 80 }],
                     resources: {
-                        limits: { cpu: "10m", memory: "64Mi" },
-                        requests: { cpu: "1m", memory: "8Mi" },
+                        limits: { cpu: "100m", memory: "128Mi" },
+                        requests: { cpu: "10m", memory: "32Mi" },
                     },
                     env: Object.entries(walletEnv).map(([name, value]) => ({
                         name,
                         value,
                     })),
+                    // Readiness probe - ensures pod is ready before receiving traffic
+                    readinessProbe: {
+                        httpGet: {
+                            path: "/",
+                            port: 80,
+                        },
+                        initialDelaySeconds: 2,
+                        periodSeconds: 5,
+                        timeoutSeconds: 2,
+                        successThreshold: 1,
+                        failureThreshold: 3,
+                    },
+                    // Liveness probe - restarts pod if nginx crashes
+                    livenessProbe: {
+                        httpGet: {
+                            path: "/",
+                            port: 80,
+                        },
+                        initialDelaySeconds: 10,
+                        periodSeconds: 10,
+                        timeoutSeconds: 2,
+                        successThreshold: 1,
+                        failureThreshold: 3,
+                    },
                 },
             ],
         },
@@ -243,8 +291,11 @@ export const walletService = new KubernetesService(
             ],
             // No rewrite needed - listener nginx handles /listener prefix internally
             customAnnotations: {
-                "nginx.ingress.kubernetes.io/proxy-buffering": "off",
                 "nginx.ingress.kubernetes.io/proxy-body-size": "10m",
+                // Enable buffering for better performance with static assets
+                "nginx.ingress.kubernetes.io/proxy-buffering": "on",
+                "nginx.ingress.kubernetes.io/proxy-buffers-number": "4",
+                "nginx.ingress.kubernetes.io/proxy-buffer-size": "8k",
             },
         },
     },