fix(nginx): strip /api prefix in proxy_pass (api_prefix is /api/v1)

apps/admin-ui/nginx.conf

@@ -1,17 +1,29 @@
-server {
+worker_processes auto;
+pid /run/nginx.pid;
+error_log /var/log/nginx/error.log warn;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    access_log /var/log/nginx/access.log;
+
+    server {
         listen 80;
         root /var/www/html;
         index index.html;
 
-    # Health check endpoint for nginx itself
+        # Health check endpoint
         location = /health {
             access_log off;
             return 200 "nginx ok\n";
             add_header Content-Type text/plain;
         }
 
-    # Banner entry points — cross-origin script loads from customer
+        # Banner entry points
-    # sites, so they need permissive CORS.
         location = /consent-loader.js {
             add_header Access-Control-Allow-Origin "*" always;
             add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@@ -26,16 +38,15 @@ server {
             try_files $uri =404;
         }
 
-    # Proxy API requests to FastAPI backend
+        # Proxy API requests to FastAPI backend — strip /api prefix
         location /api/ {
-        proxy_pass http://127.0.0.1:8000;
+            proxy_pass http://127.0.0.1:8000/;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-    # Proxy /docs, /openapi.json to FastAPI (Swagger UI)
         location /docs {
             proxy_pass http://127.0.0.1:8000;
             proxy_set_header Host $host;
@@ -46,14 +57,14 @@ server {
             proxy_set_header Host $host;
         }
 
-    # SPA fallback — serve index.html for all other routes
+        # SPA fallback
         location / {
             try_files $uri $uri/ /index.html;
         }
 
-    # Cache static assets
         location /assets/ {
             expires 1y;
             add_header Cache-Control "public, immutable";
         }
+    }
 }