# HERALD — nginx reverse proxy for SOLARGOD. Replace SOLARGOD_DOMAIN, then run
# certbot for TLS once the A record resolves. serve.py handles both static files
# and the /proxy/* JPL endpoints (with its disk cache), so we proxy everything.
server {
    listen 80;
    server_name SOLARGOD_DOMAIN;

    # (optional perf) serve committed static assets straight from disk instead of
    # through Python:  root /opt/solargod;  try_files $uri @app;  location @app { ... }
    location / {
        proxy_pass http://127.0.0.1:8147;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 90s;   # first cold Horizons spacecraft fetch can take 2–5 s
    }
}