`sites-available/designerwallcoverings.ai`

28 lines
# designerwallcoverings.ai — pre-DNS-flip vhost (port 80 only).
# TLS + CF proxy added later once NS swap completes.
server {
    listen 80;
    listen [::]:80;
    server_name designerwallcoverings.ai www.designerwallcoverings.ai;

    if ($http_user_agent ~* "copyrightagent|copyrightbot") { return 403; }

    # ACME challenge path so certbot can issue once DNS flips.
    location /.well-known/acme-challenge/ { root /var/www/html; }

    # Steve's standing rule: no-store on HTML so CF doesn't cache.
    add_header Cache-Control "no-store, must-revalidate" always;

    client_max_body_size 16m;

    location / {
        proxy_pass http://127.0.0.1:9925;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 90s;
    }
}