server {
    listen       80;
    listen       [::]:80;
    server_name  _;

    root   /usr/share/nginx/html;
    index  index.html;

    # Lightweight health endpoint (Docker/Coolify probe + Traefik).
    location = /healthz {
        access_log off;
        add_header Content-Type text/plain;
        return 200 'ok';
    }

    # Single-page app: always fall back to index.html.
    location / {
        try_files $uri $uri/ /index.html;
    }

    # index.html must never be cached, so a redeploy is picked up immediately.
    location = /index.html {
        add_header Cache-Control "no-store, no-cache, must-revalidate";
        add_header X-Content-Type-Options "nosniff";
        add_header Referrer-Policy "no-referrer-when-downgrade";
    }

    gzip            on;
    gzip_vary       on;
    gzip_min_length 1024;
    gzip_types      text/plain text/css application/javascript application/json image/svg+xml;
}