# SSH Proxmox: DApp LXC + NPMplus

Run from a host that can SSH to the Proxmox node.

## 1. Deploy DApp LXC (5801)

On **r630-02** use storage `thin3` (no `local-lvm`). From the **proxmox** repo root:

```bash
source config/ip-addresses.conf 2>/dev/null || true
export PROXMOX_HOST="${PROXMOX_HOST_R630_02:-192.168.11.12}"
export STORAGE="thin3"
export ENV_FILE="$(pwd)/smom-dbis-138/.env"
# Option A: copy from local (no git in container)
export REPO_PATH="$(pwd)/smom-dbis-138"
# Option B: clone (use HTTPS; private repo needs token or deploy key)
# export REPO_URL="https://github.com/your-org/smom-dbis-138.git"
cd smom-dbis-138 && ./scripts/deployment/deploy-dapp-lxc.sh
```

Use `--skip-create` if 5801 already exists. Use `--dry-run` to print only.

## 2. NPMplus: add dapp.d-bis.org

**Option A — From a host on the same LAN as NPMplus (192.168.11.x):**

```bash
cd /home/intlc/projects/proxmox && source .env && bash scripts/nginx-proxy-manager/complete-dapp-npmplus-from-lan.sh
```

Then in NPMplus UI (https://192.168.11.167:81): open the new proxy for **dapp.d-bis.org**, request SSL, and enable **Force SSL**.

**Option B — Via SSH to a Proxmox host** (if that host can reach 192.168.11.167:81):

```bash
cd /home/intlc/projects/proxmox && source .env && source config/ip-addresses.conf && bash scripts/nginx-proxy-manager/add-dapp-proxy-host-via-ssh.sh
```

Set `NPMPLUS_SSH_HOST` if the default (r630-02) cannot reach NPMplus.

**Option C — Manual in UI:** Log in at https://192.168.11.167:81 → Proxy Hosts → Add: domain `dapp.d-bis.org`, forward `192.168.11.58:80`, HTTP. Then request SSL and Force SSL.

## 3. Tunnel + DNS (optional)

Add hostname dapp.d-bis.org to RPC tunnel (URL https://192.168.11.167:443). CNAME dapp -> tunnel in Cloudflare.