remove redundant step from setup

Add copy-paste deploy steps matching the NullCart guide, including TLS bootstrap, Let's Encrypt, Tor onion, and updates.

.env.example

@@ -0,0 +1,2 @@
+COMPOSE_PROJECT_NAME=nullcart_promo_prod
+CLEARNET_DOMAIN=nullcart.net

.gitignore

@@ -0,0 +1,3 @@
+.env.prod
+/deploy/certs
+/deploy/certbot/www

README.md

@@ -1,3 +1,123 @@
 # NullCart Promo Website
 
-Static promo landing page for [NullCart](https://git.nobswebdev.com/nobswebdev/nullcart) — HTML and CSS only, zero JavaScript.
+Static promo landing page for [NullCart](https://git.nobswebdev.com/nobswebdev/nullcart) - HTML and CSS only, zero JavaScript.
+
+## Development
+
+No Docker required locally. Open `index.html` in your browser.
+
+## Production
+
+### 1. Requirements
+
+- Ubuntu 22.04+ or similar Linux with Docker Engine and the Compose plugin — follow [Install Docker Engine on Ubuntu](https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository)
+- A domain name pointing at your server (A records for apex and `www`)
+
+### 2. Server setup
+
+Deploy as **root** on the VPS.
+
+Verify:
+
+```bash
+docker compose version
+```
+
+### 3. Clone the repository
+
+```bash
+cd /root
+git clone https://git.nobswebdev.com/nobswebdev/nullcart_promo_website.git nullcart_promo_website
+cd nullcart_promo_website
+```
+
+### 4. Configure environment
+
+```bash
+cd /root/nullcart_promo_website
+cp .env.example .env.prod
+chmod 600 .env.prod
+```
+
+Edit `.env.prod`:
+
+| Variable               | Production value               |
+| ---------------------- | ------------------------------ |
+| `COMPOSE_PROJECT_NAME` | `nullcart_promo_prod`          |
+| `CLEARNET_DOMAIN`      | apex only, e.g. `nullcart.net` |
+
+### 5. Bootstrap TLS certificates
+
+Nginx needs certificate files before it can start on port 443. For the **first** deploy, create a temporary self-signed pair (replaced after Let's Encrypt):
+
+```bash
+./deploy/scripts/bootstrap-certs.sh
+```
+
+After the stack is running, obtain real certificates (step 7).
+
+### 6. Start the stack
+
+```bash
+./deploy/scripts/deploy.sh
+```
+
+Check containers:
+
+```bash
+docker compose --env-file .env.prod -f docker-compose.prod.yml ps
+```
+
+### 7. Issue Let's Encrypt certificates
+
+Remove the temporary bootstrap certificates under `deploy/certs/live/` (Certbot cannot issue into the layout created by `bootstrap-certs.sh`):
+
+```bash
+rm -rf deploy/certs/live/*
+```
+
+Request the real certificate (apex + www):
+
+```bash
+./deploy/scripts/issue-certs.sh --email you@example.com
+```
+
+Reload nginx:
+
+```bash
+docker compose --env-file .env.prod -f docker-compose.prod.yml exec nginx nginx -s reload
+```
+
+#### Automatic renewal
+
+Open root's crontab:
+
+```bash
+crontab -e
+```
+
+Add a weekly job (`/root/nullcart_promo_website` is the standard deploy path):
+
+```cron
+0 3 * * 0 /root/nullcart_promo_website/deploy/scripts/renew-certs.sh >> /var/log/nullcart-promo-cert-renew.log 2>&1
+```
+
+Save and exit the editor. Optional — run once manually to verify:
+
+```bash
+/root/nullcart_promo_website/deploy/scripts/renew-certs.sh
+```
+
+### 8. Tor onion address
+
+```bash
+./deploy/scripts/show-onion.sh
+```
+
+### 9. Updates
+
+```bash
+./deploy/scripts/update.sh
+```
+
+This pulls the latest code and rebuilds the stack (`deploy.sh`).

deploy/scripts/bootstrap-certs.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.prod"
+
+cd "$ROOT_DIR"
+
+if [[ ! -f "$ENV_FILE" ]]; then
+    echo "Missing ${ENV_FILE}. Copy .env.example to .env.prod and configure it." >&2
+    exit 1
+fi
+
+# shellcheck disable=SC1090
+set -a
+source "$ENV_FILE"
+set +a
+
+if [[ -z "${CLEARNET_DOMAIN:-}" ]]; then
+    echo "CLEARNET_DOMAIN is not set in .env.prod" >&2
+    exit 1
+fi
+
+LIVE_DIR="${ROOT_DIR}/deploy/certs/live/${CLEARNET_DOMAIN}"
+
+if [[ -f "${LIVE_DIR}/fullchain.pem" ]]; then
+    echo "Certificates already exist at deploy/certs/live/${CLEARNET_DOMAIN}" >&2
+    exit 1
+fi
+
+mkdir -p "$LIVE_DIR"
+
+openssl req -x509 -nodes -newkey rsa:2048 -days 1 \
+    -keyout "${LIVE_DIR}/privkey.pem" \
+    -out "${LIVE_DIR}/fullchain.pem" \
+    -subj "/CN=${CLEARNET_DOMAIN}"
+
+echo "Temporary self-signed certificates created at deploy/certs/live/${CLEARNET_DOMAIN}"

deploy/scripts/deploy.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.prod"
+
+cd "$ROOT_DIR"
+
+if [[ ! -f "$ENV_FILE" ]]; then
+    echo "Missing ${ENV_FILE}. Copy .env.example to .env.prod and configure it." >&2
+    exit 1
+fi
+
+docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml up -d --build
+
+echo "Pruning unused Docker data older than 24h..."
+docker system prune -af --filter "until=24h"

deploy/scripts/issue-certs.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.prod"
+CERTBOT_EMAIL=""
+
+usage() {
+    cat <<EOF
+Usage: $(basename "$0") --email you@example.com
+
+Obtain Let's Encrypt certificates for CLEARNET_DOMAIN and www.CLEARNET_DOMAIN using
+the webroot challenge. Nginx must be running and serving /.well-known/acme-challenge/
+from deploy/certbot/www.
+
+Environment is read from .env.prod (CLEARNET_DOMAIN).
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --email)
+            CERTBOT_EMAIL="$2"
+            shift 2
+            ;;
+        -h | --help)
+            usage
+            exit 0
+            ;;
+        *)
+            echo "Unknown option: $1" >&2
+            usage >&2
+            exit 1
+            ;;
+    esac
+done
+
+if [[ ! -f "$ENV_FILE" ]]; then
+    echo "Missing ${ENV_FILE}" >&2
+    exit 1
+fi
+
+# shellcheck disable=SC1090
+set -a
+source "$ENV_FILE"
+set +a
+
+if [[ -z "${CLEARNET_DOMAIN:-}" ]]; then
+    echo "CLEARNET_DOMAIN is not set in .env.prod" >&2
+    exit 1
+fi
+
+if [[ -z "$CERTBOT_EMAIL" ]]; then
+    echo "Pass --email for Let's Encrypt registration." >&2
+    usage >&2
+    exit 1
+fi
+
+mkdir -p "${ROOT_DIR}/deploy/certbot/www" "${ROOT_DIR}/deploy/certs"
+
+docker run --rm \
+    -v "${ROOT_DIR}/deploy/certbot/www:/var/www/certbot" \
+    -v "${ROOT_DIR}/deploy/certs:/etc/letsencrypt" \
+    certbot/certbot certonly \
+    --webroot \
+    -w /var/www/certbot \
+    -d "$CLEARNET_DOMAIN" \
+    -d "www.${CLEARNET_DOMAIN}" \
+    --email "$CERTBOT_EMAIL" \
+    --agree-tos \
+    --non-interactive
+
+if [[ ! -f "${ROOT_DIR}/deploy/certs/live/${CLEARNET_DOMAIN}/fullchain.pem" ]]; then
+    echo "Expected certificates at deploy/certs/live/${CLEARNET_DOMAIN}" >&2
+    exit 1
+fi
+
+echo "Certificates issued at deploy/certs/live/${CLEARNET_DOMAIN}"
+echo "Reload nginx: docker compose --env-file .env.prod -f docker-compose.prod.yml exec nginx nginx -s reload"

deploy/scripts/renew-certs.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.prod"
+
+cd "$ROOT_DIR"
+
+if [[ ! -f "$ENV_FILE" ]]; then
+    echo "Missing ${ENV_FILE}" >&2
+    exit 1
+fi
+
+mkdir -p "${ROOT_DIR}/deploy/certbot/www" "${ROOT_DIR}/deploy/certs"
+
+docker run --rm \
+    -v "${ROOT_DIR}/deploy/certbot/www:/var/www/certbot" \
+    -v "${ROOT_DIR}/deploy/certs:/etc/letsencrypt" \
+    certbot/certbot renew \
+    --webroot \
+    -w /var/www/certbot
+
+docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml exec nginx nginx -s reload
+
+echo "Certificate renewal complete; nginx reloaded."

deploy/scripts/show-onion.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.prod"
+
+cd "$ROOT_DIR"
+
+if [[ ! -f "$ENV_FILE" ]]; then
+    echo "Missing ${ENV_FILE}" >&2
+    exit 1
+fi
+
+docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml exec tor \
+    cat /var/lib/tor/hs/hostname

deploy/scripts/update.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+cd "$ROOT_DIR"
+
+git pull
+
+"${ROOT_DIR}/deploy/scripts/deploy.sh"

deploy/tor/Dockerfile

@@ -0,0 +1,7 @@
+FROM alpine:3.20
+
+RUN apk add --no-cache tor
+
+COPY torrc /etc/tor/torrc
+
+CMD ["tor", "-f", "/etc/tor/torrc"]

deploy/tor/torrc

@@ -0,0 +1,5 @@
+SocksPort 0
+Log notice stdout
+
+HiddenServiceDir /var/lib/tor/hs/
+HiddenServicePort 80 nginx:8080

docker-compose.prod.yml

@@ -0,0 +1,29 @@
+services:
+    nginx:
+        build:
+            context: .
+            dockerfile: nginx/Dockerfile.prod
+        container_name: ${COMPOSE_PROJECT_NAME}_nginx
+        restart: unless-stopped
+        env_file:
+            - .env.prod
+        ports:
+            - '80:80'
+            - '443:443'
+        volumes:
+            - ./deploy/certs:/etc/nginx/certs:ro
+            - ./deploy/certbot/www:/var/www/certbot:ro
+
+    tor:
+        build:
+            context: ./deploy/tor
+        container_name: ${COMPOSE_PROJECT_NAME}_tor
+        restart: unless-stopped
+        volumes:
+            - nullcart_promo.tor.prod.data:/var/lib/tor
+        depends_on:
+            nginx:
+                condition: service_started
+
+volumes:
+    nullcart_promo.tor.prod.data:

index.html

@@ -5,9 +5,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <meta
       name="description"
-      content="NullCart — free, self-hosted Monero shop. No JS, no buyer accounts. Sell on clearnet and Tor."
+      content="NullCart - free, self-hosted, privacy-focused crypto shop. Sell on clearnet and Tor."
     />
-    <title>NullCart — Free self-hosted Monero shop</title>
+    <title>NullCart - free self-hosted crypto shop</title>
     <link rel="icon" href="assets/favicon.png" type="image/png" />
     <link rel="stylesheet" href="css/styles.css" />
   </head>
@@ -60,7 +60,7 @@
           />
           <div class="hero__content">
             <p class="hero__badge">Free &amp; open source</p>
-            <h1>Self-hosted Monero shop</h1>
+            <h1>Self-hosted crypto shop</h1>
             <ul class="hero__highlights" aria-label="Key features">
               <li>Non-custodial</li>
               <li>No JS</li>
@@ -68,49 +68,51 @@
               <li>Clearnet &amp; Tor onion</li>
             </ul>
             <p class="hero__sub">
-              Complete crypto e-commerce solution, with no third parties
-              involved. Built with a mission to support the crypto economy.
+              Complete, privacy-focused crypto e-commerce solution. Built with a
+              mission to support the crypto economy.
             </p>
             <div class="hero__actions">
-              <div class="link-group">
-                <span class="link-group__label">Repository</span>
-                <div class="repo-links">
-                  <a
-                    class="btn btn--primary"
-                    href="https://git.nobswebdev.com/nobswebdev/nullcart"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    >Clearnet</a
-                  >
-                  <a
-                    class="btn btn--ghost"
-                    href="http://4f5t7o2vgo4sdaliwax3isyxzfuxvbvkuwk4smfowutrvx2uneu4egyd.onion/nobswebdev/nullcart"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    >Tor</a
-                  >
+              <div class="hero__actions-row">
+                <div class="link-group">
+                  <span class="link-group__label">Repository</span>
+                  <div class="repo-links">
+                    <a
+                      class="btn btn--primary"
+                      href="https://git.nobswebdev.com/nobswebdev/nullcart"
+                      target="_blank"
+                      rel="noopener noreferrer"
+                      >Clearnet</a
+                    >
+                    <a
+                      class="btn btn--ghost"
+                      href="http://4f5t7o2vgo4sdaliwax3isyxzfuxvbvkuwk4smfowutrvx2uneu4egyd.onion/nobswebdev/nullcart"
+                      target="_blank"
+                      rel="noopener noreferrer"
+                      >Tor</a
+                    >
+                  </div>
                 </div>
-              </div>
-              <div class="link-group">
-                <span class="link-group__label">Live demo</span>
-                <div class="repo-links">
-                  <a
-                    class="btn btn--primary"
-                    href="https://demo.nullcart.net/"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    >Clearnet</a
-                  >
-                  <a
-                    class="btn btn--ghost"
-                    href="http://3jh2ltksxtsmjidik3st6dawfdcheo2cyv2vth2365af75zdxnwqqsyd.onion/"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    >Tor</a
-                  >
+                <div class="link-group">
+                  <span class="link-group__label">Live demo</span>
+                  <div class="repo-links">
+                    <a
+                      class="btn btn--primary"
+                      href="https://demo.nullcart.net/"
+                      target="_blank"
+                      rel="noopener noreferrer"
+                      >Clearnet</a
+                    >
+                    <a
+                      class="btn btn--ghost"
+                      href="http://3jh2ltksxtsmjidik3st6dawfdcheo2cyv2vth2365af75zdxnwqqsyd.onion/"
+                      target="_blank"
+                      rel="noopener noreferrer"
+                      >Tor</a
+                    >
+                  </div>
                 </div>
+                <a class="btn btn--ghost" href="#features">See features</a>
               </div>
-              <a class="btn btn--ghost" href="#features">See features</a>
             </div>
           </div>
         </div>
@@ -120,15 +122,11 @@
         <div class="container about">
           <h2 class="section__title">What is NullCart?</h2>
           <p>
-            NullCart is an open-source, self-hosted shop for accepting Monero.
-            Run it on your server with a non-custodial wallet, and sell on
-            clearnet and Tor.
-          </p>
-          <p>
-            Built for the Monero community — designed for a maximum privacy
-            experience and full control over funds and infrastructure. Lower the
-            barrier to selling with XMR and help grow the circular crypto
-            economy.
+            NullCart is a free, open-source crypto shop you host yourself. You
+            run it on your server with built-in non-custodial wallets - no
+            payment processors in the middle. Buyers pay in crypto without
+            accounts, and the storefront runs without JavaScript. You manage
+            products and orders from a merchant CMS, on clearnet and Tor.
           </p>
         </div>
       </section>
@@ -137,8 +135,7 @@
         <div class="container">
           <h2 class="section__title">Privacy features</h2>
           <p class="section__lead">
-            Built for the Monero community — privacy at every layer of the buyer
-            experience.
+            Privacy at every layer of the buyer experience.
           </p>
           <ul class="pillars privacy-features">
             <li class="pillar">
@@ -155,11 +152,11 @@
             </li>
             <li class="pillar">
               <span class="pillar__dot" aria-hidden="true"></span> Non-custodial
-              wallet
+              wallets
             </li>
             <li class="pillar">
-              <span class="pillar__dot" aria-hidden="true"></span> XMR-only
-              payments
+              <span class="pillar__dot" aria-hidden="true"></span> Monero
+              supported
             </li>
             <li class="pillar">
               <span class="pillar__dot" aria-hidden="true"></span> Zero
@@ -193,7 +190,7 @@
         <div class="container">
           <h2 class="section__title">Features</h2>
           <p class="section__lead">
-            Everything you need to sell digital and physical goods with Monero.
+            Everything you need to sell digital and physical goods with crypto.
           </p>
           <div class="features-grid">
             <article class="feature-card feature-card--lead">
@@ -214,12 +211,11 @@
               </p>
               <ul>
                 <li>
-                  No JavaScript needed — the buyer shop runs without client-side
-                  scripts
+                  No JavaScript on the buyer shop - no client-side scripts
                 </li>
-                <li>Works perfectly in Tor Browser strictest security mode</li>
+                <li>Works in Tor Browser strictest security mode</li>
                 <li>
-                  No sign-up, no profiles — orders opened with a private access
+                  No sign-up or profiles - orders open with a private access
                   token
                 </li>
               </ul>
@@ -237,18 +233,19 @@
                 <circle cx="12" cy="12" r="10" />
                 <path d="M12 6v12M8 10h8M8 14h8" />
               </svg>
-              <h3>Monero-native payments</h3>
+              <h3>Direct crypto payments</h3>
               <p class="feature-card__lead">
-                Built-in Monero integration. Zero third-party payment services.
+                Built-in crypto wallets. No third-party payment services.
               </p>
               <ul>
                 <li>
-                  Direct XMR payments to your own wallet — no custodial gateway
+                  Payments go straight to your wallets - no custodial gateway
                 </li>
                 <li>
-                  Per-order addresses with QR codes; live rates, fiat display
+                  Per-order addresses with QR codes, live rates, and fiat
+                  display
                 </li>
-                <li>You hold the seed — funds never touch a middleman</li>
+                <li>You hold the keys - funds never touch a middleman</li>
               </ul>
             </article>
 
@@ -266,7 +263,7 @@
               </svg>
               <h3>E-commerce features</h3>
               <p class="feature-card__lead">
-                A full storefront for digital and physical goods — catalog,
+                A full storefront for digital and physical goods - catalog,
                 cart, checkout, and fulfillment.
               </p>
               <ul>
@@ -275,15 +272,15 @@
                 </li>
                 <li>Shopping cart, checkout, and discount codes</li>
                 <li>
-                  Auto-deliver digital goods; quote and collect shipping for
-                  physical orders
+                  Auto-deliver digital goods and quote shipping for physical
+                  orders
                 </li>
                 <li>
                   Order tracking, live payment status, and per-order buyer chat
                 </li>
-                <li>Custom branding — your logo, favicon, and shop name</li>
+                <li>Custom branding - your logo, favicon, and shop name</li>
                 <li>
-                  Prices shown in fiat, paid in Monero with live exchange rates
+                  Prices shown in fiat, paid in crypto with live exchange rates
                 </li>
               </ul>
             </article>
@@ -321,7 +318,7 @@
         <div class="container">
           <h2 class="section__title">How it works</h2>
           <p class="section__lead">
-            Three steps from zero to selling with Monero.
+            Three steps from zero to selling with crypto.
           </p>
           <ol class="steps">
             <li class="step">
@@ -338,8 +335,8 @@
             <li class="step">
               <h3>Sell</h3>
               <p>
-                Buyers pay in XMR; you fulfill orders, chat when needed, get
-                notified via SimpleX.
+                Buyers pay in crypto. You fulfill orders, chat when needed, and
+                get notified via SimpleX.
               </p>
             </li>
           </ol>
@@ -362,14 +359,33 @@
                 <div class="gallery__frame">
                   <img
                     src="assets/gallery/storefront.png"
-                    width="1508"
-                    height="902"
+                    width="1469"
+                    height="899"
                     alt="Storefront product catalog"
                   />
                 </div>
               </a>
               <figcaption class="gallery__caption">
-                Storefront — product catalog
+                Storefront - product catalog
+              </figcaption>
+            </figure>
+            <figure class="gallery__item">
+              <a
+                class="gallery__link"
+                href="#lightbox-cart"
+                aria-label="View larger cart screenshot"
+              >
+                <div class="gallery__frame">
+                  <img
+                    src="assets/gallery/cart.png"
+                    width="1469"
+                    height="899"
+                    alt="Shopping cart"
+                  />
+                </div>
+              </a>
+              <figcaption class="gallery__caption">
+                Cart - shopping cart
               </figcaption>
             </figure>
             <figure class="gallery__item">
@@ -381,14 +397,14 @@
                 <div class="gallery__frame">
                   <img
                     src="assets/gallery/checkout.png"
-                    width="1508"
-                    height="902"
-                    alt="Checkout with Monero QR code"
+                    width="1469"
+                    height="899"
+                    alt="Checkout with crypto QR code"
                   />
                 </div>
               </a>
               <figcaption class="gallery__caption">
-                Checkout — XMR payment with QR code
+                Checkout - crypto payment with QR code
               </figcaption>
             </figure>
             <figure class="gallery__item">
@@ -400,17 +416,17 @@
                 <div class="gallery__frame">
                   <img
                     src="assets/gallery/order.png"
-                    width="1508"
-                    height="902"
+                    width="1469"
+                    height="899"
                     alt="Order page with encrypted chat"
                   />
                 </div>
               </a>
               <figcaption class="gallery__caption">
-                Order page — status and encrypted chat
+                Order page - status and encrypted chat
               </figcaption>
             </figure>
-            <figure class="gallery__item">
+            <figure class="gallery__item gallery__item--last">
               <a
                 class="gallery__link"
                 href="#lightbox-cms"
@@ -446,8 +462,8 @@
             <img
               class="lightbox__img"
               src="assets/gallery/storefront.png"
-              width="1508"
-              height="902"
+              width="1469"
+              height="899"
               alt="Storefront product catalog"
             />
             <a class="lightbox__close" href="#gallery" aria-label="Close"
@@ -459,7 +475,7 @@
             class="lightbox"
             role="dialog"
             aria-modal="true"
-            aria-label="Checkout with Monero QR code"
+            aria-label="Checkout with crypto QR code"
           >
             <a
               class="lightbox__backdrop"
@@ -469,9 +485,32 @@
             <img
               class="lightbox__img"
               src="assets/gallery/checkout.png"
-              width="1508"
-              height="902"
-              alt="Checkout with Monero QR code"
+              width="1469"
+              height="899"
+              alt="Checkout with crypto QR code"
+            />
+            <a class="lightbox__close" href="#gallery" aria-label="Close"
+              >&times;</a
+            >
+          </div>
+          <div
+            id="lightbox-cart"
+            class="lightbox"
+            role="dialog"
+            aria-modal="true"
+            aria-label="Shopping cart"
+          >
+            <a
+              class="lightbox__backdrop"
+              href="#gallery"
+              aria-label="Close"
+            ></a>
+            <img
+              class="lightbox__img"
+              src="assets/gallery/cart.png"
+              width="1469"
+              height="899"
+              alt="Shopping cart"
             />
             <a class="lightbox__close" href="#gallery" aria-label="Close"
               >&times;</a
@@ -492,8 +531,8 @@
             <img
               class="lightbox__img"
               src="assets/gallery/order.png"
-              width="1508"
-              height="902"
+              width="1469"
+              height="899"
               alt="Order page with encrypted chat"
             />
             <a class="lightbox__close" href="#gallery" aria-label="Close"
@@ -531,8 +570,8 @@
           <div class="cta-block">
             <h2>Live demo</h2>
             <p>
-              Try a running NullCart shop — browse products, cart, and checkout
-              flow. Test payments with stagenet Monero.
+              Try a running NullCart shop. Browse products, cart, and checkout.
+              Test payments on test networks.
             </p>
             <div class="repo-links repo-links--center">
               <a
@@ -593,10 +632,10 @@
               </p>
             </li>
             <li class="roadmap__item">
-              <h3>More privacy coins</h3>
+              <h3>More cryptocurrencies</h3>
               <p>
-                Support for additional privacy-focused cryptocurrencies beyond
-                Monero.
+                Support for more coins over time, with the same non-custodial
+                wallet model.
               </p>
             </li>
             <li class="roadmap__item">
@@ -611,7 +650,7 @@
         <div class="container">
           <h2 class="section__title">Contact</h2>
           <p class="section__lead">
-            Questions, feedback, or collaboration — reach out.
+            Questions, feedback, or collaboration - reach out.
           </p>
           <div class="contact-grid">
             <div class="contact-card">

nginx/Dockerfile.prod

@@ -0,0 +1,15 @@
+FROM nginx:alpine
+
+RUN apk add --no-cache gettext \
+    && rm /etc/nginx/conf.d/default.conf
+
+COPY index.html /usr/share/nginx/html/
+COPY css/ /usr/share/nginx/html/css/
+COPY assets/ /usr/share/nginx/html/assets/
+
+COPY nginx/conf.d/ /etc/nginx/templates/conf.d/
+COPY nginx/docker-entrypoint.sh /docker-entrypoint.sh
+
+RUN chmod +x /docker-entrypoint.sh
+
+ENTRYPOINT ["/docker-entrypoint.sh"]

nginx/conf.d/clearnet.conf.template

@@ -0,0 +1,27 @@
+server {
+    listen 80;
+    server_name ${CLEARNET_DOMAIN} www.${CLEARNET_DOMAIN};
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name ${CLEARNET_DOMAIN} www.${CLEARNET_DOMAIN};
+
+    ssl_certificate /etc/nginx/certs/live/${CLEARNET_DOMAIN}/fullchain.pem;
+    ssl_certificate_key /etc/nginx/certs/live/${CLEARNET_DOMAIN}/privkey.pem;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+}

nginx/conf.d/onion.conf

@@ -0,0 +1,11 @@
+server {
+    listen 8080;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+}

nginx/docker-entrypoint.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+set -eu
+
+export CLEARNET_DOMAIN
+envsubst '${CLEARNET_DOMAIN}' \
+    < /etc/nginx/templates/conf.d/clearnet.conf.template \
+    > /etc/nginx/conf.d/clearnet.conf
+
+cp /etc/nginx/templates/conf.d/onion.conf /etc/nginx/conf.d/onion.conf
+
+exec nginx -g 'daemon off;'