helexa/asset/nginx/bench.helexa.ai.bootstrap.conf

# Bootstrap vhost for bench.helexa.ai — http-only, used ONLY to obtain
# the initial Let's Encrypt cert via the webroot challenge (the full TLS
# vhost can't load before the cert file exists). script/infra-setup.sh
# installs this, runs certbot, then swaps in bench.helexa.ai.conf.
server {
    listen 80;
    server_name bench.helexa.ai;

    location /.well-known/acme-challenge/ {
        root /var/www/bench.helexa.ai;
    }
    location / {
        try_files $uri $uri/ =404;
    }
}