Update snapshots and .well-known handling (#2)

This should resolve a few issues...

Reviewed-on: #2
Co-authored-by: mifi <badmf@mifi.dev>
Co-committed-by: mifi <badmf@mifi.dev>

nginx.conf

@@ -108,7 +108,12 @@ http {
             try_files $uri $uri/ /index.html;
         }
 
-        # Deny access to hidden files (.git, .env, etc.)
+        # Allow .well-known (security.txt, ACME challenge, etc.)
+        location ^~ /.well-known/ {
+            add_header Cache-Control "public, max-age=86400";
+        }
+
+        # Deny access to other hidden files (.git, .env, etc.)
         location ~ /\. {
             deny all;
             access_log off;