fase 1 productizacion: capa de configuracion (glosario multi-giro, sucursales y categorias configurables, ajustes de clinica por instancia, colores de marca, horarios, URLs de pago dinamicas) + script de provisioning de instancia nueva con datos demo + frontend consumiendo la config

infra/provision/templates/nginx-vhost.tmpl

@@ -0,0 +1,39 @@
+# Instancia ${NOMBRE} (${SLUG}) — frontend React + API Odoo en puerto ${HTTP_PORT}.
+# Acceso público: ${DOMINIO} (agregar el ingress en el dashboard del túnel
+# cloudflared: hostname ${DOMINIO} -> service http://localhost:80).
+${LAN_COMMENT}
+server {
+    listen 80;
+${LAN_LISTEN}
+    server_name ${DOMINIO};
+
+    # Frontend React (mismo build que SKEEN; la marca sale del API /brand)
+    location / {
+        root ${FRONTEND_DIR};
+        try_files $$uri $$uri/ /index.html;
+        add_header Cache-Control "no-cache";
+    }
+
+    # API Odoo para el frontend
+    location /api/odoo/ {
+        proxy_pass http://127.0.0.1:${HTTP_PORT}/;
+        proxy_http_version 1.1;
+        proxy_set_header Host $$host;
+        proxy_set_header X-Real-IP $$remote_addr;
+        proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $$scheme;
+        proxy_read_timeout 120s;
+    }
+
+    # Backend Odoo (administración directa, opcional)
+    location /web/ {
+        proxy_pass http://127.0.0.1:${HTTP_PORT}/web/;
+        proxy_http_version 1.1;
+        proxy_set_header Host $$host;
+        proxy_set_header X-Real-IP $$remote_addr;
+        proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $$scheme;
+        proxy_read_timeout 120s;
+    }
+${WACRM_BLOCK}
+}