- apps/ops/infra/nginx.conf brought back in sync with the live working conf
(was missing the /hub proxy + /auth/whoami → deploying the old template
would have broken OPS). Tokens are placeholders (__ERP_API_TOKEN__ /
__HUB_TOKEN__), never real values.
- deploy.sh now renders nginx.conf on every deploy: substitutes the tokens
from the server's /opt/targo-hub/.env (ERP_TOKEN = service account, not
Administrator; HUB_SERVICE_TOKEN), validates via throwaway nginx -t, then
restarts ops-frontend. Fixes the "nginx.conf deleted from host → OPS down
on restart" landmine and makes token rotation a one-command redeploy.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
d15dec5e6c