From 1d24a85e075047334996b68abe9e833733726a82 Mon Sep 17 00:00:00 2001
From: Hikari <hikari@nhcarrigan.com>
Date: Wed, 18 Mar 2026 11:28:11 -0700
Subject: [PATCH] feat: add nginx config for tarot static site
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Serves only index.html and cards/*.json — all other paths return 403.
---
 nginx/nginx/sites-available/tarot.conf | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 nginx/nginx/sites-available/tarot.conf

diff --git a/nginx/nginx/sites-available/tarot.conf b/nginx/nginx/sites-available/tarot.conf
new file mode 100644
index 0000000..b4b2435
--- /dev/null
+++ b/nginx/nginx/sites-available/tarot.conf
@@ -0,0 +1,21 @@
+# Tarot static site.
+server {
+  listen 443 ssl;
+  server_name tarot.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/tarot.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/tarot.nhcarrigan.com/privkey.pem;
+
+  root /home/naomi/tarot;
+
+  location = / {
+    try_files /index.html =404;
+  }
+
+  location ~ \.json$ {
+    try_files $uri =404;
+  }
+
+  location / {
+    return 403;
+  }
+}
\ No newline at end of file