nx_wiki_https_daemon.nx

nx_wiki_https_daemon.nx -- V-HOST-2: sovereign HTTPS wiki daemon. Composes existing TLS 1.3 handshake (sovereign Ed25519 OR ECDSA path) + wiki HTTP router into a single daemon serving sovereign HTTPS for the wiki at andelinwest.com / nishifamily.com / etc. FINAL substrate piece per NISHI_ANDELINWEST_DEPLOY_PLAYBOOK. After this ships, the deploy is operator-side ops only: 1. nx_cert_gen (V-HOST-4 SHIPPED) -> Ed25519 cert 2. Porkbun A records (operator panel; 5 min) 3. Router port-forward 443 -> substrate host 4. Boot this daemon 5. https://andelinwest.com/ LIVE COMPOSES (per "avoid duplicate primitives"): nx_http_server (TCP listen + accept; existing primitive) nx_tls13_server_session_run_ed25519 (V-HOST-2+1-2) OR nx_tls13_server_session_run (existing ECDSA path) nx_tls13_server_session_app_recv (decrypt request bytes) nx_tls13_server_session_app_send (encrypt response bytes) wiki/nx_wiki_routes.nx_wiki_route_dispatch (existing wiki router) nx_csprng (server_random + x25519 priv) nx_http_header_find (req parse; existing helper) V-HOST-2 SCOPE: - Single-vhost daemon (one cert + one wiki state); per-vhost dispatch is V-HOST-2.5 refactor when N > 1 sites need this daemon - Defaults to Ed25519 cert path (V-HOST-2+1 modern) - Reads cert + priv from operator-config paths - Accept loop: per connection runs TLS handshake + dispatches one HTTP request to wiki router + sends encrypted response - Per Cardinal 14 graceful degradation: per-conn errors don't kill the daemon V-HOST-2 NON-SCOPE (queued for V-HOST-2.5 + V-HOST-5): - Multi-vhost dispatch (one daemon serving N domains) - Keep-alive (single request per TLS session V1) - Session resumption (PSK / 0-RTT) - Unified per-vhost handler dispatch (currently wiki-only)