infra README: Nginx Proxy Manager proxy host, router to NPM, NPM fallback (D-120)

Owner checklist without the SSH add-on step: KVITT_PUBLIC_HOST placeholder, NPM's Details, SSL and Advanced tab fields, the Custom Nginx Configuration block (security headers of D-117 at server level, its own location / so NPM's X-Served-By does not drop them, /i/ kept out of NPM's access and error logs), what NPM logs, the HSTS caveat, the router rule external 8443 to the Home Assistant Pi's 443, the NPM-down fallback (no LAN path for release builds), operations and troubleshooting. RESTORE checks port 8080. Rehearsal of 2026-10-19 recorded. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
2026-10-19 19:50:26 +02:00
parent d05f13a080
commit 62f5279daa
2 changed files with 259 additions and 150 deletions
@@ -71,10 +71,11 @@ It prints the new epoch. The phones see it and re-push their data (§14.4.8).
 ```bash
 docker compose start server
 docker compose ps server          # healthy within a minute
-curl -fsS --resolve icehack.asuscomm.com:8443:127.0.0.1 https://icehack.asuscomm.com:8443/health
+curl -fsS http://localhost:8080/health
 ```

-The last line prints `{"status":"ok",...}`.
+The last line prints `{"status":"ok",...}` (the server's own port; the path through Nginx Proxy Manager is
+unchanged by a restore).

 ## 7. The phones