Add nginx reverse proxy with Let's Encrypt SSL

- nginx as reverse proxy for dawarich frontend
- Let's Encrypt certificate support with automatic renewal
- HTTP to HTTPS redirect, gzip compression
- Bootstrap config for initial certificate request

Co-authored-by: Cursor <cursoragent@cursor.com>

nginx/nginx-bootstrap.conf

@@ -0,0 +1,19 @@
+# Bootstrap-Konfiguration für initiale Zertifikatsanforderung (ohne SSL)
+server {
+	listen 80;
+	listen [::]:80;
+	server_name location.butenostfreesen.de;
+
+	location /.well-known/acme-challenge/ {
+		root /var/www/certbot;
+	}
+
+	location / {
+		proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header X-Forwarded-Proto $scheme;
+		proxy_set_header Host $http_host;
+		proxy_redirect off;
+		proxy_pass http://dawarich_app:3000/;
+	}
+}