server {
    listen 80;
    server_name _;
    root /usr/share/nginx/html;
    index index.html;
    charset utf-8;

    location / {
        try_files $uri $uri/ $uri.html =404;

        add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate" always;
        add_header Pragma "no-cache" always;
        add_header Expires "0" always;
        add_header X-Content-Type-Options nosniff always;
    }

    # Permanent shortlink to latest xetup.exe – update on each release
    location = /dl {
        return 302 https://git.xetup.x9.cz/x9/xetup/releases/download/v0.1.0/xetup.exe;
    }

    # Proxy Forgejo API calls so browser doesn't need CORS or direct access to Forgejo
    location /forgejo-api/ {
        proxy_pass         http://xetup-forgejo:3000/api/v1/;
        proxy_set_header   Host              xetup-forgejo;
        proxy_set_header   X-Real-IP         $remote_addr;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto $scheme;
        add_header         Cache-Control "no-store" always;
    }

    error_page 404 /404.html;
}