server {
    listen 8080;
    server_name _;
    root /usr/share/nginx/html;
    index index.html;

    # Regenerated by docker-entrypoint.d/50-conduit-runtime-env.sh on every
    # container start -- must never be cached, or a mode flip (public <->
    # private) followed by a container restart would silently keep serving
    # the old relay config to anyone with a warm cache.
    location = /runtime-env.js {
        add_header Cache-Control "no-cache, no-store, must-revalidate";
        add_header Pragma "no-cache";
        expires 0;
    }

    # Client-side routing (@tanstack/react-router) -- unknown paths fall
    # through to index.html rather than 404ing.
    location / {
        try_files $uri $uri/ /index.html;
    }

    location = /health {
        access_log off;
        default_type text/plain;
        return 200 "ok\n";
    }
}