Harden onion boot flow and deepen site surfaces

Add persistent onion key backup and restore, improve startup resilience, and flesh out the major site verticals with richer navigation, search coverage, and operator documentation.

Made-with: Cursor

nginx.example.conf

@@ -0,0 +1,34 @@
+# CyberLux — hub + generated entry onions (see nginx/cyberlux-onion-servers.inc).
+# Request handling: lib/onionRoutes.generated.ts + proxy.ts (Next.js 16+)
+#
+# Hub: 127.0.0.1:8080 — no X-Cyberlux-Node (full app)
+# Other loopback ports: see scripts/onion-nodes.json → scripts/generate-onion-config.cjs
+#
+# Requires /etc/nginx/cyberlux-server-common.inc and /etc/nginx/cyberlux-onion-servers.inc
+# (installed by scripts/install-tor-onion.sh).
+
+# --- HUB (main storefront) ---
+server {
+    listen 127.0.0.1:8080 default_server;
+    server_name _;
+
+    include /etc/nginx/cyberlux-server-common.inc;
+    proxy_hide_header X-Powered-By;
+
+    client_max_body_size 25m;
+
+    location / {
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto http;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_read_timeout 86400;
+    }
+}
+
+include /etc/nginx/cyberlux-onion-servers.inc;