dark mode, logging fixes to avoid agent traffic bloat

nginx/configs/nginx.conf

@@ -78,6 +78,22 @@ http {
         location ~* /(\\.git|\\.env|composer\\.(json|lock)|package(-lock)?\\.json|yarn\\.lock)$ {
             return 404;
         }
+
+        # Route agent control-plane requests to a dedicated access log to keep
+        # the primary access log focused on user-facing traffic.
+        location ^~ /api/v1/agent/ {
+            access_log /var/log/nginx/agent-access.log main;
+            proxy_intercept_errors on;
+            error_page 404 = @masked_404;
+            error_page 401 = @masked_401;
+            proxy_pass  http://127.0.0.1:8000;
+            include options-https-headers.conf;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $forwarded_for;
+            proxy_set_header X-Forwarded-Proto  $scheme;
+            proxy_set_header X-Forwarded-Host $host;
+        }
         
         location / {
             proxy_intercept_errors on;