feat: add public-facing web interface with domain-based routing

Add public-web service with static landing page for client enrollment and device provisioning. Add public-web container to docker-compose with port 8082. Configure nginx reverse proxy with domain-based routing: admin-vpn.nesterovic.cc for admin interface and vpn.nesterovic.cc for public interface. Add proxy headers for X-Real-IP, X-Forwarded-For and X-Forwarded-Proto to both server blocks. Create public-web Dockerfile with nginx serving

deploy/docker-compose.yml

@@ -44,11 +44,21 @@ services:
     networks:
       - control
 
+  public-web:
+    build:
+      context: ..
+      dockerfile: public-web/Dockerfile
+    ports:
+      - "8082:80"
+    networks:
+      - control
+
   reverse-proxy:
     image: nginx:1.27-alpine
     depends_on:
       - backend
       - admin-web
+      - public-web
     ports:
       - "80:80"
     volumes: