feat: OMNL Bank online production — 128 chains, Central Bank UI, settlement stack

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/nginx/frontend-spa.conf

@@ -0,0 +1,14 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    location /assets/ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+}

deploy/nginx/omnl-bank.conf

@@ -0,0 +1,70 @@
+# OMNL Bank online — nginx reverse proxy (Central Bank style production)
+# TLS: mount certs at deploy/nginx/certs/fullchain.pem + privkey.pem
+
+upstream omnl_api {
+    server token-aggregation:3000;
+}
+
+upstream omnl_settlement {
+    server settlement-middleware:3011;
+}
+
+upstream omnl_exchange {
+    server dbis-exchange:3012;
+}
+
+upstream omnl_frontend {
+    server frontend:80;
+}
+
+server {
+    listen 80;
+    server_name bank.omnl.hybxfinance.io localhost;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name bank.omnl.hybxfinance.io localhost;
+
+    ssl_certificate     /etc/nginx/certs/fullchain.pem;
+    ssl_certificate_key /etc/nginx/certs/privkey.pem;
+    ssl_protocols       TLSv1.2 TLSv1.3;
+
+    add_header X-OMNL-Bank "online" always;
+    add_header X-OMNL-Chains "128" always;
+
+    # Frontend — Central Bank / Office 24 / DBIS Trade
+    location / {
+        proxy_pass http://omnl_frontend;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    # OMNL API (token-aggregation)
+    location /api/v1/ {
+        proxy_pass http://omnl_api/api/v1/;
+        proxy_set_header Host $host;
+        proxy_read_timeout 120s;
+    }
+
+    # Settlement middleware
+    location /settlement/ {
+        proxy_pass http://omnl_settlement/api/v1/settlement/;
+        proxy_set_header Host $host;
+        proxy_set_header Authorization $http_authorization;
+        proxy_read_timeout 120s;
+    }
+
+    # DBIS Exchange
+    location /exchange/ {
+        proxy_pass http://omnl_exchange/api/v1/exchange/;
+        proxy_set_header Host $host;
+        proxy_read_timeout 120s;
+    }
+
+    location /health {
+        return 200 'OMNL Bank online — 128 chains';
+        add_header Content-Type text/plain;
+    }
+}