chore: update docker

docker/backend/custom-rules.conf

@@ -1,3 +1,6 @@
+# Exclure le corps des requêtes/réponses de l'audit log pour garder les lignes < 6KB (limite Wazuh)
+SecAuditLogParts ABIFHZ
+
 SecRuleRemoveById 932235
 SecRuleRemoveById 911100
 

docker/backend/nginx.conf

@@ -6,19 +6,6 @@ map $http_x_request_id $req_id {
     ""      $request_id;
 }
 
-# =========================================================
-# Upstreams
-# =========================================================
-upstream backend {
-    server backend:8080;
-    keepalive 32;
-}
-
-upstream frontend {
-    server frontend:80;
-    keepalive 8;
-}
-
 # =========================================================
 # HTTP → HTTPS redirect
 # =========================================================
@@ -58,7 +45,7 @@ server {
     ssl_stapling        on;
     ssl_stapling_verify on;
     ssl_trusted_certificate /etc/nginx/certs/fullchain.pem;
-    resolver 1.1.1.1 8.8.8.8 valid=300s;
+    resolver 127.0.0.11 valid=10s ipv6=off;
     resolver_timeout 5s;
 
     # ---------------------------------------------------
@@ -118,7 +105,8 @@ server {
             return 204;
         }
 
-        proxy_pass         http://backend;
+        set $upstream_backend http://backend:8080;
+        proxy_pass         $upstream_backend;
         proxy_http_version 1.1;
         proxy_set_header   Connection        "";
         proxy_set_header   Host              $host;
@@ -138,12 +126,13 @@ server {
     }
 
     # ---------------------------------------------------
-    # Webhook Telegram
+    # Webhooks Telegram (LBTelegram — /webhook/bot1, /webhook/bot2…)
     # ---------------------------------------------------
-    location = /webhook/telegram {
+    location /webhook/ {
         limit_except POST { deny all; }
 
-        proxy_pass         http://backend;
+        set $upstream_lbtelegram http://lbtelegram:8081;
+        proxy_pass         $upstream_lbtelegram;
         proxy_http_version 1.1;
         proxy_set_header   Connection        "";
         proxy_set_header   Host              $host;
@@ -170,7 +159,8 @@ server {
     # Frontend React SPA
     # ---------------------------------------------------
     location / {
-        proxy_pass         http://frontend;
+        set $upstream_frontend http://frontend:80;
+        proxy_pass         $upstream_frontend;
         proxy_http_version 1.1;
         proxy_set_header   Connection        "";
         proxy_set_header   Host              $host;