# ai-web — static React build. No published host port; Caddy reaches this on
# the proxy network and Authelia has already authenticated the request.
server {
    listen 80;
    server_name _;
    root /usr/share/nginx/html;

    # SPA: unknown paths fall through to the app, not to a 404.
    location / {
        try_files $uri $uri/ /index.html;
    }

    location /healthz {
        access_log off;
        return 200 "ok\n";
        add_header Content-Type text/plain;
    }

    gzip on;
    gzip_types text/css application/javascript application/json;
}