Serve Help2Travel landing and partnership API

hosts/heather/caddy.nix

@@ -136,8 +136,37 @@ Allow: /" 200
       # browse включает Caddy's built-in directory listing. Корень /var/www/pub.
       # Без auth — класть только публичные файлы.
       "files.iscg.dev".extraConfig = ''
-        root * /var/www/pub
+        handle /help2travel/api/* {
-        file_server browse
+          reverse_proxy 127.0.0.1:8791 {
+            header_up X-Client-IP {remote_host}
+          }
+        }
+        handle {
+          root * /var/www/pub
+          file_server browse
+        }
+      '';
+
+      # Help2Travel: static landing independent of the polling bot.
+      "help2travel.ru".extraConfig = ''
+        encode zstd gzip
+        header {
+          X-Content-Type-Options nosniff
+          Referrer-Policy strict-origin-when-cross-origin
+          Content-Security-Policy "default-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'"
+        }
+        handle /api/* {
+          reverse_proxy 127.0.0.1:8791 {
+            header_up X-Client-IP {remote_host}
+          }
+        }
+        handle {
+          root * /var/www/pub/help2travel
+          file_server
+        }
+      '';
+      "www.help2travel.ru".extraConfig = ''
+        redir https://help2travel.ru{uri} permanent
       '';
     };
   };