# Complete DApp + NPMplus (remaining step)

DApp LXC **5801** is deployed and serving at **http://192.168.11.58**. To expose it as **dapp.d-bis.org** behind NPMplus and SSL, do the following **from a host that can reach NPMplus** (e.g. your machine on the same LAN as 192.168.11.x).

## If 192.168.11.167 (NPMplus) is not reachable

SSH to a Proxmox host and check VM health. NPMplus is **VMID 10233** on **r630-01** (192.168.11.11).

```bash
# Diagnose: list containers, status, and whether NPMplus (10233) is running
bash scripts/maintenance/diagnose-vm-health-via-proxmox-ssh.sh
```

If NPMplus (10233) is **stopped**, start it:

```bash
ssh root@192.168.11.11 'pct start 10233'
```

Wait ~30s, then ping 192.168.11.167 again. Once reachable, run the "One command" below to add the dapp proxy.

## One command (from proxmox repo root, on a host on the LAN)

```bash
cd /home/intlc/projects/proxmox && source .env && bash scripts/nginx-proxy-manager/complete-dapp-npmplus-from-lan.sh
```

Then in **NPMplus UI** (https://192.168.11.167:81): open the proxy for **dapp.d-bis.org** → **SSL** tab → request certificate and enable **Force SSL**.

## If you are not on the LAN

- Use **Option B (via SSH)** or **Option C (manual UI)** in [SSH_DAPP_NPMPLUS_RUNBOOK.md](./SSH_DAPP_NPMPLUS_RUNBOOK.md#2-npmplus-add-dappd-bisorg).
- Or VPN into 192.168.11.x and run the one command above.

## Optional: Tunnel + DNS

For public HTTPS at dapp.d-bis.org: add **dapp.d-bis.org** to the Cloudflare tunnel config (origin https://192.168.11.167:443 or the NPMplus public URL) and add a CNAME in Cloudflare DNS. See runbook §3.