try_files avoids 404s, redirecting to SPA root; catch-all handles unknown paths for selfhost-web.
Co-authored-by: Balu Babu <balub997@gmail.com>