fix: Fixed api url on web

web/app/status/[pageId]/page.tsx

@@ -12,8 +12,21 @@ type FetchResult =
     | { kind: "not-found" }
     | { kind: "unavailable" };
 
-async function fetchSnapshot(host: string, forwardedFor: string, pageId: string): Promise<FetchResult> {
-    const base = process.env.API_URL ?? process.env.NEXT_PUBLIC_API_URL ?? "http://localhost:8080";
+/*
+ * The control plane this call is made to is the visitor's own host.
+ *
+ * This app proxies nothing and holds no address for the server (see
+ * next.config.ts): /public is routed to it by the reverse proxy, exactly as
+ * /api and /auth are for the browser. So the SSR fetch goes back through that
+ * proxy at <slug>.vantage.<tld>, which is a per-tenant address by
+ * construction — and X-Forwarded-Host below is still what selects the tenant,
+ * because the hop from this process cannot set Host.
+ */
+function apiBase(proto: string, host: string): string {
+    return `${proto}://${host}`;
+}
+
+async function fetchSnapshot(base: string, host: string, forwardedFor: string, pageId: string): Promise<FetchResult> {
 
     // The instance is resolved server-side from the visitor's host, so it has
     // to be forwarded explicitly — this is a server-to-server call and its own
@@ -95,7 +108,8 @@ export default async function PublicStatusPage({
         .filter((v): v is string => !!v)
         .join(", ");
 
-    const result = await fetchSnapshot(host, forwardedFor, pageId);
+    const proto = h.get("x-forwarded-proto")?.split(",")[0].trim() || "https";
+    const result = await fetchSnapshot(apiBase(proto, host), host, forwardedFor, pageId);
     if (result.kind === "not-found") notFound();
 
     return (