ops: phasefinal.com moved to Cloudflare Pages; pfi-ana-webhost destroyed and removed from inventory, DNS and the FortiGate

stacks/phasefinal-web/conf/nginx.conf

@@ -1,18 +0,0 @@
-server {
-    listen 80;
-    server_name _;
-    root /usr/share/nginx/html;
-    index index.html;
-
-    # Static site; long cache on immutable assets, short on the document so
-    # a dictated edit goes live on the next deploy without a purge.
-    location = / { add_header Cache-Control "public, max-age=300"; try_files /index.html =404; }
-    location ~* \.(woff2|svg|png|ico)$ { add_header Cache-Control "public, max-age=31536000, immutable"; }
-    location ~* \.css$ { add_header Cache-Control "public, max-age=3600"; }
-
-    add_header X-Content-Type-Options nosniff always;
-    add_header X-Frame-Options DENY always;
-    add_header Referrer-Policy no-referrer always;
-
-    location / { try_files $uri $uri/ =404; }
-}

stacks/phasefinal-web/conf/site/404.html

@@ -0,0 +1,55 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="theme-color" content="#0f1318">
+<title>Page not found — Phase Final, Inc.</title>
+<meta name="description" content="Page not found.">
+<link rel="icon" href="/favicon.svg" type="image/svg+xml">
+<link rel="stylesheet" href="/style.css?v=2026-09-28">
+</head>
+<body>
+
+<a class="skip" href="#main">Skip to content</a>
+<header class="site-header">
+  <div class="site-header-inner">
+    <a class="brand" href="/"><img src="/assets/pfi-wordmark-duotone-dark.svg" alt="Phase Final, Inc." width="98" height="28"></a>
+    <nav class="site-nav" aria-label="Site">
+      <ul>
+        <li><a href="/services/software/">Applications</a></li>
+        <li><a href="/services/systems-engineering/">Systems</a></li>
+        <li><a href="/services/hosting/">Hosting</a></li>
+        <li><a href="/services/ai/">AI</a></li>
+        <li><a href="/engagement/">Engagement</a></li>
+        <li><a href="/track-record/">Track record</a></li>
+        <li><a href="/contact/">Contact</a></li>
+      </ul>
+    </nav>
+  </div>
+</header>
+
+<header class="page-header">
+  <div class="hero-inner">
+    <div class="hero-copy">
+      <h1 class="lede">Page not found.</h1>
+      <p class="sublede">There is nothing at this address. <a href="/">Return to the home page</a>.</p>
+    </div>
+  </div>
+</header>
+
+<footer class="site-footer">
+  <span>Phase Final, Inc.</span>
+  <nav aria-label="Footer">
+    <a href="/services/software/">Applications</a>
+    <a href="/services/systems-engineering/">Systems</a>
+    <a href="/services/hosting/">Hosting</a>
+    <a href="/services/ai/">AI</a>
+    <a href="/engagement/">Engagement</a>
+    <a href="/track-record/">Track record</a>
+    <a href="/contact/">Contact</a>
+    <a href="/privacy/">Privacy</a>
+  </nav>
+</footer>
+</body>
+</html>

stacks/phasefinal-web/conf/site/_headers

@@ -0,0 +1,18 @@
+# Cloudflare Pages response headers (ported from the retired nginx.conf on ana-docker, 2026-10-04).
+/*
+  X-Content-Type-Options: nosniff
+  X-Frame-Options: DENY
+  Referrer-Policy: no-referrer
+  ! Access-Control-Allow-Origin
+
+/fonts/*
+  Cache-Control: public, max-age=31536000, immutable
+
+/assets/*
+  Cache-Control: public, max-age=31536000, immutable
+
+/favicon.svg
+  Cache-Control: public, max-age=31536000, immutable
+
+/style.css
+  Cache-Control: public, max-age=3600

stacks/phasefinal-web/conf/site/privacy/index.html

@@ -46,7 +46,7 @@
     <ul class="detail-list">
       <li><h3>What this site collects</h3><p>Nothing from your browser. Fonts and images are served from this site itself. No advertising or analytics scripts are loaded, so no cross-site profiling occurs on our side.</p></li>
       <li><h3>What email you send us</h3><p>Inquiries sent to inquiry@phasefinal.com are retained as ordinary business email for correspondence and engagement records. We do not add you to marketing lists; there are no marketing lists.</p></li>
-      <li><h3>Hosting</h3><p>This site is served from infrastructure the firm operates, fronted by Cloudflare for TLS and caching. Server logs exist for abuse control and are not joined to anything else.</p></li>
+      <li><h3>Hosting</h3><p>This site is static files hosted on Cloudflare Pages, which serves it over TLS. The firm keeps no server logs for it; Cloudflare processes requests under its own privacy policy.</p></li>
       <li><h3>Questions</h3><p>Write to <a href="mailto:inquiry@phasefinal.com">inquiry@phasefinal.com</a>.</p></li>
     </ul>
     <p class="related"><a href="/">Home →</a></p>