feat(nginx): 301 www.codecrispi.es → codecrispi.es (#188)

Co-authored-by: Michael Czechowski <mail@dailysh.it>
Co-committed-by: Michael Czechowski <mail@dailysh.it>

Author: nextlevelshit

nginx.conf

@@ -61,6 +61,19 @@ http {
     access_log /dev/stdout main;
     error_log /dev/stderr warn;
 
+    # Canonical-host redirect: www.codecrispi.es → codecrispi.es (apex).
+    # Upstream proxy terminates TLS; we only see plain HTTP here, but the
+    # Host header survives so we can detect www and 301 it.
+    # Header sent uses https:// because the original request was HTTPS at
+    # the proxy boundary. If an upstream sets X-Forwarded-Proto, we honor
+    # that; otherwise default to https (production reality).
+    server {
+        listen 80;
+        listen [::]:80;
+        server_name www.codecrispi.es;
+        return 301 https://codecrispi.es$request_uri;
+    }
+
     server {
         listen 80 default_server;
         listen [::]:80 default_server;