refactor(justfile): de-dup deploy-code, move nginx/setup to deploy-nginx

justfile

@@ -103,7 +103,7 @@ build-check:
 # ============================================================================
 
 [group('deploy')]
-deploy: build deploy-code deploy-deps deploy-migrate
+deploy: build deploy-code deploy-nginx deploy-deps deploy-migrate
     @just deploy-env
     @just deploy-verify-permissions
     @echo ""
@@ -112,7 +112,8 @@ deploy: build deploy-code deploy-deps deploy-migrate
 
 [group('deploy')]
 deploy-code:
-    # Sync app code + nginx config + permissions (no Composer deps, no migrations)
+    # Sync application code only (no Composer deps, no migrations, no nginx config).
+    # nginx + server-side setup are handled by `deploy-nginx` (via deploy).
     rsync -vur --progress --delete \
         --chown="www-data:xamxam" \
         --exclude '/vendor' \
@@ -145,12 +146,6 @@ deploy-code:
         --exclude 'composer.json' \
         --exclude 'composer.lock' \
         app/ xamxam:/var/www/xamxam/
-    # Deploy nginx config + fix permissions + reload (single server-side run)
-    rsync -v nginx/xamxam.conf xamxam:/tmp/xamxam.conf
-    rsync -v scripts/deploy-server.sh xamxam:/tmp/deploy-server.sh
-    ssh -t xamxam "sudo bash /tmp/deploy-server.sh"
-    ssh xamxam "rm -f /tmp/deploy-server.sh /tmp/xamxam.conf"
-    ssh xamxam "mkdir -p /var/www/xamxam/var/{cache,logs,tmp}"
 
 [group('deploy')]
 deploy-deps:
@@ -509,7 +504,6 @@ deploy-all-first: deploy deploy-backup deploy-cleanup-cron deploy-logrotate
 provision-server:
     @bash scripts/provision-server-env.sh xamxam
     @just deploy
-    @just deploy-nginx
     @just deploy-backup
     @just deploy-cleanup-cron
     @just deploy-logrotate