Route java.xsharp-lang.xyz to its retained deprecated catalog instead of the main homepage by adding a dedicated TLS nginx virtual host with the existing certificate, shared immutable frontend assets, repository security headers, read-only static routing, and explicit deployment documentation

2 files changed, 48 insertions, 0 deletions

diff --git a/README.md b/README.md
index eecaff1..6eab391 100644
--- a/README.md
+++ b/README.md
@@ -15,6 +15,7 @@ This repository contains the public web surface for the Visual X# programming la
   verification/recovery mail, secure session cookies, PostgreSQL persistence, and digest-only CLI tokens.
 - `java.xsharp-lang.xyz` is retained as a deprecated, read-only historical Java catalog so existing links continue to
   resolve. It does not define the current compiler pipeline and does not accept new artifact publication.
+  Its dedicated nginx host serves the generated `/java/` page at the domain root while sharing immutable frontend assets.
 
 The deprecated catalog records the former `org.progmasoft.visual_xsharp.xmm.writer`,
 `org.progmasoft.visual_xsharp.xmm.reader`, and `org.progmasoft.java_utilities.ffi.c` package plans for historical reference;
diff --git a/ops/nginx/xsharp.conf b/ops/nginx/xsharp.conf
index f7cb3b7..40462cc 100644
--- a/ops/nginx/xsharp.conf
+++ b/ops/nginx/xsharp.conf
@@ -33,6 +33,53 @@ server {
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
+    server_name java.xsharp-lang.xyz;
+
+    root /srv/xsharp/website/current/frontend/java;
+    index index.html;
+    server_tokens off;
+
+    ssl_certificate /etc/letsencrypt/live/xsharp-lang.xyz/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/xsharp-lang.xyz/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    include /etc/nginx/snippets/repository-security-headers.conf;
+
+    location /_astro/ {
+        alias /srv/xsharp/website/current/frontend/_astro/;
+        include /etc/nginx/snippets/repository-security-headers.conf;
+        add_header Cache-Control "public, max-age=31536000, immutable";
+    }
+
+    location /fonts/ {
+        alias /srv/xsharp/website/current/frontend/fonts/;
+        include /etc/nginx/snippets/repository-security-headers.conf;
+        add_header Cache-Control "public, max-age=31536000, immutable";
+    }
+
+    location = /xsharp-logo.png {
+        alias /srv/xsharp/website/current/frontend/xsharp-logo.png;
+    }
+
+    location = /xsharp-logo.webp {
+        alias /srv/xsharp/website/current/frontend/xsharp-logo.webp;
+    }
+
+    location / {
+        include /etc/nginx/snippets/repository-security-headers.conf;
+        add_header Cache-Control "public, max-age=300";
+        try_files $uri $uri/ =404;
+    }
+
+    location ~ /\. {
+        deny all;
+    }
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
     server_name viget.xsharp-lang.xyz;
 
     root /srv/xsharp/website/current/frontend/repo;