637ac5dfbf
serve.py binds loopback, so prod mirrors godstrument.pro: systemd runs serve.py,
nginx reverse-proxies the domain to 127.0.0.1:8147, certbot for TLS. Adds
deploy/{solargod.service, nginx-solargod.conf, deploy.sh, HERALD.md}. BLOCKED on
the user: domain/DNS + VPS access (Part ω.2). Nothing deployed — artifacts only.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
18 lines
785 B
Plaintext
18 lines
785 B
Plaintext
# HERALD — nginx reverse proxy for SOLARGOD. Replace SOLARGOD_DOMAIN, then run
|
||
# certbot for TLS once the A record resolves. serve.py handles both static files
|
||
# and the /proxy/* JPL endpoints (with its disk cache), so we proxy everything.
|
||
server {
|
||
listen 80;
|
||
server_name SOLARGOD_DOMAIN;
|
||
|
||
# (optional perf) serve committed static assets straight from disk instead of
|
||
# through Python: root /opt/solargod; try_files $uri @app; location @app { ... }
|
||
location / {
|
||
proxy_pass http://127.0.0.1:8147;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_read_timeout 90s; # first cold Horizons spacecraft fetch can take 2–5 s
|
||
}
|
||
}
|