paperscout.conf

server {
    listen 443 ssl;
    server_name dev.cppdigest.org;

    ssl_certificate     /etc/letsencrypt/live/dev.cppdigest.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/dev.cppdigest.org/privkey.pem;

    # Health endpoint — must come before the general /paperscout/ block
    # because nginx uses longest-prefix matching.
    location /paperscout/health {
        proxy_pass http://127.0.0.1:9101/health;
    }

    # Slack events — trailing slashes on both location and proxy_pass
    # strip the /paperscout prefix so Bolt receives /slack/events.
    location /paperscout/ {
        proxy_pass http://127.0.0.1:9100/;
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}