<!doctype html>
<html lang="vi"><head><meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>Storefront · food.xplus.vn</title>
<style>
:root{color-scheme:light dark}
*{box-sizing:border-box}
body{margin:0;min-height:100vh;display:grid;place-items:center;
 font:15px/1.6 ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,sans-serif;
 background:#0f1115;color:#e7e9ee}
@media (prefers-color-scheme:light){body{background:#f6f7f9;color:#1a1d23}}
.card{width:min(560px,92vw);padding:28px 30px;border-radius:14px;
 background:#171a21;border:1px solid #262b35}
@media (prefers-color-scheme:light){.card{background:#fff;border-color:#e3e6ec}}
h1{margin:0 0 4px;font-size:20px;letter-spacing:-.01em}
.sub{margin:0 0 20px;font-size:13px;opacity:.62}
.ok{display:inline-flex;align-items:center;gap:7px;font-size:12px;font-weight:600;
 padding:4px 10px;border-radius:999px;background:#0d3320;color:#4ade80;margin-bottom:18px}
@media (prefers-color-scheme:light){.ok{background:#dcfce7;color:#15803d}}
table{width:100%;border-collapse:collapse;font-size:13px}
td{padding:9px 0;border-top:1px solid #262b35;vertical-align:top}
@media (prefers-color-scheme:light){td{border-color:#eceef2}}
td:first-child{opacity:.6;width:42%;padding-right:14px}
code{font:12.5px ui-monospace,SFMono-Regular,Menlo,monospace;word-break:break-all}
.foot{margin-top:20px;font-size:12px;opacity:.5;line-height:1.5}
</style></head><body>
<div class="card">
  <div class="ok">● chuỗi hoạt động</div>
  <h1>food.xplus.vn</h1>
  <p class="sub">Storefront giả — dựng để kiểm on-demand TLS, chưa phải FE thật.</p>
  <table>
    <tr><td>Host trình duyệt hỏi</td><td><code>food.xplus.vn</code></td></tr>
    <tr><td>X-Forwarded-Host</td><td><code>food.xplus.vn</code></td></tr>
    <tr><td>X-Forwarded-Proto</td><td><code>https</code></td></tr>
    <tr><td>IP thật của khách</td><td><code>216.73.216.122</code></td></tr>
    <tr><td>Caddy gọi tới từ</td><td><code>10.0.1.93</code></td></tr>
  </table>
  <p class="foot">Chứng chỉ do Caddy tự xin sau khi hỏi
  <code>/tls/authorize</code>. SSR thật sẽ đọc <code>X-Forwarded-Host</code> rồi
  đặt <code>Origin</code> tương ứng khi gọi API.</p>
</div></body></html>