Initial commit: WireGuard config generator (génération de clés côté navigateur)

Dockerfile

@@ -0,0 +1,16 @@
+# Image "unprivileged" officielle : nginx tourne nativement en non-root, écoute sur un port >1024
+FROM nginxinc/nginx-unprivileged:1.27-alpine
+
+USER root
+RUN rm -rf /usr/share/nginx/html/* /etc/nginx/conf.d/default.conf
+
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+COPY app/ /usr/share/nginx/html/
+
+RUN chown -R nginx:nginx /usr/share/nginx/html
+
+USER nginx
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD wget -qO- http://127.0.0.1:8080/healthz || exit 1