Next.js integration

// middleware.ts (project root, or src/ if you use a src directory)
import { NextResponse, type NextRequest } from 'next/server';

export function middleware(request: NextRequest) {
  const { pathname, search } = request.nextUrl;

  // The script posts conversions to /api/events/conversions. Our API serves them at /api/conversions.
  const target = pathname.startsWith('/api/events/conversions')
    ? pathname.replace('/api/events/conversions', '/api/conversions')
    : pathname;

  // Do not pass your visitors' cookies or any HTTP authentication on to us
  const headers = new Headers(request.headers);
  headers.delete('cookie');
  headers.delete('authorization');
  // The script file does not need the address of the page that loads it
  if (pathname === '/js/script.js') headers.delete('referer');

  // Origin (and the origin-only Referer of the script's requests) stay intact: the origin check reads them
  return NextResponse.rewrite(new URL(target + search, 'https://thebizness.ai'), {
    request: { headers },
  });
}

export const config = {
  matcher: ['/js/script.js', '/api/events/:path*'],
};

# /etc/nginx/snippets/thebizness-proxy.conf
proxy_ssl_server_name on;
proxy_set_header Host thebizness.ai;
# An empty value means the header is not passed on
proxy_set_header Cookie "";
proxy_set_header Authorization "";

# Inside the server { } block of your site
location = /js/script.js {
    include snippets/thebizness-proxy.conf;
    proxy_set_header Referer "";
    proxy_pass https://thebizness.ai/js/script.js;
}

location = /api/events {
    include snippets/thebizness-proxy.conf;
    proxy_pass https://thebizness.ai/api/events;
}

location = /api/events/event {
    include snippets/thebizness-proxy.conf;
    proxy_pass https://thebizness.ai/api/events/event;
}

location = /api/events/conversions {
    include snippets/thebizness-proxy.conf;
    proxy_pass https://thebizness.ai/api/conversions;
}

# Optional: only copies of the script cached before October 2026 still call this
location = /api/events/conversions/check {
    include snippets/thebizness-proxy.conf;
    proxy_pass https://thebizness.ai/api/conversions/check;
}

// Cloudflare Worker. Add routes for:
//   yourdomain.com/js/script.js
//   yourdomain.com/api/events*
const UPSTREAM = 'https://thebizness.ai';

export default {
  async fetch(request) {
    const url = new URL(request.url);

    // The script posts conversions to /api/events/conversions. Our API serves them at /api/conversions.
    const path = url.pathname.startsWith('/api/events/conversions')
      ? url.pathname.replace('/api/events/conversions', '/api/conversions')
      : url.pathname;

    // Do not pass your visitors' cookies or any HTTP authentication on to us
    const headers = new Headers(request.headers);
    headers.delete('cookie');
    headers.delete('authorization');
    // The script file does not need the address of the page that loads it
    if (url.pathname === '/js/script.js') headers.delete('referer');

    return fetch(new Request(UPSTREAM + path + url.search, {
      method: request.method,
      headers,
      body: request.body,
      redirect: 'manual',
    }));
  },
};