Finalize public portfolio launch

apps/portfolio/nginx/default.conf

@@ -6,6 +6,7 @@ server {
     root /usr/share/nginx/html;
     index index.html;
     server_tokens off;
+    error_page 404 /404.html;
     charset utf-8;
 
     access_log /dev/stdout;
@@ -17,9 +18,18 @@ server {
     add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
     add_header Cross-Origin-Opener-Policy "same-origin" always;
     add_header Cross-Origin-Resource-Policy "same-origin" always;
-    add_header X-Robots-Tag "noindex, nofollow" always;
     add_header Content-Security-Policy "default-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; script-src 'none'; connect-src 'none'; object-src 'none'; frame-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests" always;
 
+
+    location = /.well-known/security.txt {
+        default_type text/plain;
+        try_files /security.txt =404;
+    }
+
+    location = /404.html {
+        internal;
+    }
+
     location = /healthz {
         access_log off;
         default_type text/plain;