nginx: GET /auth/me on the API zone (it runs on every page load; the sign-in flow's 10/min showed a visitor opening a dozen pages as signed out, the browser check's 429s) (#68)

ddiff --git a/deploy/nginx/openvibe.tips.conf b/deploy/nginx/openvibe.tips.conf
iindex 3ecf631..677fd02 100644
---- a/deploy/nginx/openvibe.tips.conf
++++ b/deploy/nginx/openvibe.tips.conf
@@@ -59,6 +59,18 @@ server {
      # Prometheus text for host-local scrapers only (http://127.0.0.1:4610/metrics).
      location = /metrics { return 404; }
  
++    # GET /auth/me runs on every page load (the navbar's session): the API zone, not the sign-in flow's 10/min,
++    # or a visitor who opens a dozen pages in a minute shows as signed out (the browser check's 429s, 2026-10-17).
++    location = /auth/me {
++        limit_req zone=ovtips_api burst=30 nodelay;
++        proxy_pass http://127.0.0.1:4610;
++        proxy_http_version 1.1;
++        proxy_set_header Host $host;
++        proxy_set_header X-Real-IP $remote_addr;
++        proxy_set_header X-Forwarded-For $remote_addr;
++        proxy_set_header CF-Connecting-IP $remote_addr;
++        proxy_set_header X-Forwarded-Proto $scheme;
++    }
      location /auth/ {
          limit_req zone=ovtips_auth burst=10 nodelay;
          proxy_pass http://127.0.0.1:4610;