From 098a3f460b0b7f74bce750131165429352b5b283 Mon Sep 17 00:00:00 2001
From: Ilias Aaguida <ilias.aaguida@beta.gouv.fr>
Date: Tue, 21 Apr 2026 23:26:36 +0200
Subject: [PATCH] fix(nginx): add resolver and upstream resolve to prevent
 stale IP routing

---
 nginx.conf | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index 95e96226c1c..3d44b7eb246 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -65,13 +65,20 @@ http {
 	proxy_read_timeout 30s;
 	proxy_send_timeout 5s;
 
+	# Resolve container hostnames through Docker DNS so upstream IP changes
+	# (after container recreation) are picked up without requiring nginx restart.
+	resolver 127.0.0.11 valid=30s;
+	resolver_timeout 5s;
+
 	upstream relay {
-		server relay:3000;
+		zone relay 64k;
+		server relay:3000 resolve;
 		keepalive 2;
 	}
 
 	upstream sentry {
-		server web:9000;
+		zone sentry 64k;
+		server web:9000 resolve;
 		keepalive 2;
 	}