# S01: Domain Setup — DNS, Reverse Proxy, SSL

**Goal:** Add chrysopedia.com to AdGuard DNS, nginx reverse proxy on nuc01 with Certbot SSL
**Demo:** After this: https://chrysopedia.com loads the Chrysopedia web UI with SSL

## Tasks
- [x] **T01: chrysopedia.com live with SSL — AdGuard DNS, nginx reverse proxy on nuc01, Certbot cert issued** — 1. Add chrysopedia.com and www.chrysopedia.com DNS rewrites to AdGuard on ub01 (pointing to 10.0.0.9)
2. Create nginx server block for chrysopedia.com on nuc01 (proxy_pass to 10.0.0.10:8096)
3. Run certbot for SSL cert (requires external A record)
4. Verify https://chrysopedia.com loads
  - Estimate: 10min
  - Verify: ssh ub01 'curl -sI http://chrysopedia.com' | head -5
