fix: nginx warnings and clarify build requirements

- Fixed OCSP stapling by using fullchain.pem
- Fixed deprecated http2 directive syntax
- Updated README to clarify build-image.sh usage

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: h4x3rotab

custom-domain/dstack-ingress/README.md

@@ -88,16 +88,24 @@ Explanation of environment variables:
 If you prefer to build the image yourself:
 
 1. Clone this repository
-2. Build the Docker image:
+2. Build the Docker image using the provided build script:
 
 ```bash
-docker build -t yourusername/dstack-ingress .
+./build-image.sh yourusername/dstack-ingress:tag
 ```
 
+**Important**: You must use the `build-image.sh` script to build the image. This script ensures reproducible builds with:
+- Specific buildkit version (v0.20.2)
+- Deterministic timestamps (`SOURCE_DATE_EPOCH=0`)
+- Package pinning for consistency
+- Git revision tracking
+
+Direct `docker build` commands will not work properly due to the specialized build requirements.
+
 3. Push to your registry (optional):
 
 ```bash
-docker push yourusername/dstack-ingress
+docker push yourusername/dstack-ingress:tag
 ```
 
 4. Update the docker-compose.yaml file with your image name and deploy

custom-domain/dstack-ingress/scripts/entrypoint.sh

@@ -15,7 +15,8 @@ setup_py_env() {
 setup_nginx_conf() {
     cat <<EOF > /etc/nginx/conf.d/default.conf
 server {
-    listen ${PORT} ssl http2;
+    listen ${PORT} ssl;
+    http2 on;
     server_name ${DOMAIN};
     
     # SSL certificate configuration
@@ -37,7 +38,7 @@ server {
     # Enable OCSP stapling
     ssl_stapling on;
     ssl_stapling_verify on;
-    ssl_trusted_certificate /etc/letsencrypt/live/${DOMAIN}/chain.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/${DOMAIN}/fullchain.pem;
     resolver 8.8.8.8 8.8.4.4 valid=300s;
     resolver_timeout 5s;