`sites-available/designerlookbooks.com`

25 lines
# designerlookbooks.com — pre-DNS-flip vhost (port 80 only).
# TLS + CF proxy added in a later wave once NS is swapped to Cloudflare.
server {
    listen 80;
    listen [::]:80;
    server_name designerlookbooks.com www.designerlookbooks.com;

    if ($http_user_agent ~* "copyrightagent|copyrightbot") { return 403; }

    # ACME challenge path so certbot can issue once DNS flips.
    location /.well-known/acme-challenge/ { root /var/www/html; }

    # CF caches HTML otherwise (Steve's standing rule).
    add_header Cache-Control "no-store, must-revalidate" always;

    location / {
        proxy_pass http://127.0.0.1:9923;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}