5212aaa5cd
Add GET /api/map/sentinel1?bbox=... which queries Planetary Computer STAC (sentinel-1-grd, last 7d, most recent), signs the vv/hh COG with a SAS token, and returns a same-origin /titiler/... XYZ tile template. Cache keyed on quantized bbox + UTC day (20 min TTL). 429 -> 429 (Retry-After), no imagery -> 404, other upstream errors -> 502. Self-host TiTiler on the Pi (ghcr.io/developmentseed/titiler, arm64, 1G cap, host loopback 8001 -> container 8000) instead of titiler.xyz. nginx /titiler/ proxy snippet routes browser tiles to it; TITILER_PUBLIC_BASE and TITILER_INTERNAL_URL are env-driven (no hardcoded hostnames).
21 lines
937 B
Text
21 lines
937 B
Text
# osint.rpi.local — Sentinel-1 SAR tile proxy (/titiler/)
|
|
#
|
|
# GitOps: this file is the source of truth. On the Pi:
|
|
# sudo cp deploy/osint-titiler.nginx.conf /etc/nginx/snippets/osint-titiler.conf
|
|
# then `include snippets/osint-titiler.conf;` inside the osint.rpi.local server
|
|
# block (before `location /`), `nginx -t && systemctl reload nginx`.
|
|
#
|
|
# The browser hits /titiler/cog/tiles/... (same-origin). We strip the /titiler
|
|
# prefix so self-hosted TiTiler (127.0.0.1:8001) sees /cog/tiles/... and proxy
|
|
# its response straight back. Tiles are heavy PNGs — disable buffering so a
|
|
# slow client doesn't hold a worker open.
|
|
|
|
location /titiler/ {
|
|
proxy_pass http://127.0.0.1:8001/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_buffering off;
|
|
proxy_read_timeout 300s;
|
|
}
|