update for shrink image size.

deploy/nginx/conf.d/rolac.conf

@@ -12,6 +12,11 @@ server {
   ssl_certificate_key /etc/letsencrypt/live/app.rolac.org/privkey.pem;
 
   location /api/ {
+    # nginx defaults to 1 MB, which 413s phone-camera receipt uploads before they
+    # reach the API. Keep this >= the largest API [RequestSizeLimit] (offerings = 50 MB)
+    # so the per-endpoint limits in the controllers stay the real authority.
+    client_max_body_size 50m;
+
     proxy_pass         http://api:8080/api/;
     proxy_set_header   Host $host;
     proxy_set_header   X-Real-IP $remote_addr;

deploy/vm/nginx/conf.d/rolac.conf

@@ -10,6 +10,11 @@ server {
 
   # API -> api container. The SPA calls same-origin /api/... (environment.prod.ts).
   location /api/ {
+    # nginx defaults to 1 MB, which 413s phone-camera receipt uploads before they
+    # reach the API. Keep this >= the largest API [RequestSizeLimit] (offerings = 50 MB)
+    # so the per-endpoint limits in the controllers stay the real authority.
+    client_max_body_size 50m;
+
     set $upstream_api api;
     proxy_pass         http://$upstream_api:8080$request_uri;
     proxy_set_header   Host $host;