Remove Xide and ides.progmasoft.comfeature/remove-xide

Xide is no longer developed as of 2026-11-08 (Progmasoft/xide#29), so
Progmaweb stops presenting it:

- product.progmasoft.com: Xide leaves the catalog, its card and its
  detail page; /xide on the product host is a 404 like any unknown
  product. The catalog's description in every language names the Tala
  language with its tools and Catch3.
- ides.progmasoft.com served only the IDE list and the Xide page, so the
  whole site goes: the pages under app/ides, its texts in every
  language, idesRoute and its host in the proxy, and both nginx server
  blocks. The certificate of progmasoft.com no longer has to name it.

Tests: the catalog lists the remaining products and refuses xide.

2 files changed, 3 insertions, 50 deletions

diff --git a/ops/README.md b/ops/README.md
index 283ca0b..3fe1b4c 100644
--- a/ops/README.md
+++ b/ops/README.md
@@ -184,8 +184,7 @@ clients still hold; replacing the encryption key invalidates every access token,
 token, so every application has to ask again. Back up both files with the database.
 
 The certificate of `progmasoft.com` must name `credentials.progmasoft.com`, `authorize.progmasoft.com`,
-`console.progmasoft.com`, `product.progmasoft.com`, `ides.progmasoft.com` and `catch3.progmasoft.com` as well; expand
-it with certbot's webroot plugin before the vhosts are enabled, then check
+`console.progmasoft.com`, `product.progmasoft.com` and `catch3.progmasoft.com` as well; expand it with certbot's webroot plugin before the vhosts are enabled, then check
 `/.well-known/openid-configuration`, the sign-in page and the console from outside.
 
 ## Reserved accounts
diff --git a/ops/nginx/progmaweb.conf b/ops/nginx/progmaweb.conf
index 3cbb21a..f5bdddc 100644
--- a/ops/nginx/progmaweb.conf
+++ b/ops/nginx/progmaweb.conf
@@ -405,9 +405,8 @@ server {
     }
 }
 
-# The product catalog (product.progmasoft.com) and the product sites Progmaweb
-# serves itself (ides.progmasoft.com, catch3.progmasoft.com): pages of the
-# Next.js site only.
+# The product catalog (product.progmasoft.com) and the product site Progmaweb
+# serves itself (catch3.progmasoft.com): pages of the Next.js site only.
 server {
     listen 80;
     listen [::]:80;
@@ -456,51 +455,6 @@ server {
 server {
     listen 80;
     listen [::]:80;
-    server_name ides.progmasoft.com;
-
-    location ^~ /.well-known/acme-challenge/ {
-        root /var/lib/letsencrypt;
-        default_type text/plain;
-    }
-
-    location / {
-        return 308 https://ides.progmasoft.com$request_uri;
-    }
-}
-
-server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    http2 on;
-    server_name ides.progmasoft.com;
-
-    ssl_certificate /etc/letsencrypt/live/progmasoft.com/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/progmasoft.com/privkey.pem;
-    include /etc/letsencrypt/options-ssl-nginx.conf;
-
-    client_max_body_size 1m;
-
-    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
-    add_header X-Content-Type-Options "nosniff" always;
-    add_header X-Frame-Options "DENY" always;
-    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
-    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
-
-    location / {
-        proxy_pass http://127.0.0.1:3010;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_set_header X-Forwarded-Host $host;
-        proxy_read_timeout 60s;
-    }
-}
-
-server {
-    listen 80;
-    listen [::]:80;
     server_name catch3.progmasoft.com;
 
     location ^~ /.well-known/acme-challenge/ {