Files
proxmox/docs/04-configuration/GOV_PORTALS_XOM_DEV_DEPLOYMENT.md
defiQUG bea1903ac9
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
Sync all local changes: docs, config, scripts, submodule refs, verification evidence
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-21 15:46:06 -08:00

77 lines
2.8 KiB
Markdown

# Gov Portals xom-dev.phoenix.sankofa.nexus Deployment
**Domains:** `dbis`, `iccc`, `omnl`, `xom` `.xom-dev.phoenix.sankofa.nexus`
**VM:** LXC 7804 (gov-portals-dev) @ 192.168.11.54
**NPMplus:** Primary (192.168.11.167) — same as sankofa.nexus zone
---
## Quick start
From proxmox repo root, on a host with SSH to Proxmox:
```bash
# 1. Create LXC 7804 and deploy gov-portals
bash scripts/deployment/deploy-gov-portals-to-7804.sh
# 2. Add DNS (Cloudflare) - run from any host with .env
bash scripts/cloudflare/add-gov-portals-xom-dev-dns.sh
# 3. Add NPMplus proxy hosts
# Via DB (recommended when API unreachable) - runs over SSH to Proxmox:
bash scripts/nginx-proxy-manager/add-gov-portals-xom-dev-proxy-hosts-db.sh
# Or via API (from LAN host that can reach NPMplus 192.168.11.167:81):
# bash scripts/nginx-proxy-manager/add-gov-portals-xom-dev-proxy-hosts.sh
# Or add manually in NPMplus UI → Hosts → Proxy Hosts
```
## DNS setup
Add A records in Cloudflare (or your DNS) for `xom-dev.phoenix.sankofa.nexus`:
| Type | Name | Content | Proxy |
|------|------|---------|-------|
| A | dbis.xom-dev.phoenix.sankofa.nexus | 76.53.10.36 | Proxied |
| A | iccc.xom-dev.phoenix.sankofa.nexus | 76.53.10.36 | Proxied |
| A | omnl.xom-dev.phoenix.sankofa.nexus | 76.53.10.36 | Proxied |
| A | xom.xom-dev.phoenix.sankofa.nexus | 76.53.10.36 | Proxied |
Or use a wildcard:
| Type | Name | Content |
|------|------|---------|
| A | *.xom-dev.phoenix.sankofa.nexus | 76.53.10.36 |
## Port mapping
| Domain | VM Port | Service |
|--------|---------|---------|
| dbis.xom-dev.phoenix.sankofa.nexus | 3001 | DBIS portal |
| iccc.xom-dev.phoenix.sankofa.nexus | 3002 | ICCC portal |
| omnl.xom-dev.phoenix.sankofa.nexus | 3003 | OMNL portal |
| xom.xom-dev.phoenix.sankofa.nexus | 3004 | XOM portal |
## NPMplus proxy hosts (manual fallback)
If the add script cannot reach NPMplus, add these in NPMplus UI → Hosts → Proxy Hosts:
| Domain | Forward Hostname | Forward Port |
|--------|------------------|--------------|
| dbis.xom-dev.phoenix.sankofa.nexus | 192.168.11.54 | 3001 |
| iccc.xom-dev.phoenix.sankofa.nexus | 192.168.11.54 | 3002 |
| omnl.xom-dev.phoenix.sankofa.nexus | 192.168.11.54 | 3003 |
| xom.xom-dev.phoenix.sankofa.nexus | 192.168.11.54 | 3004 |
## SSL
Request Let's Encrypt certificates in NPMplus UI for each domain, or use a wildcard cert for `*.xom-dev.phoenix.sankofa.nexus` if your DNS supports it.
## Troubleshooting
- **502 Bad Gateway:** Ensure LXC 7804 is running and portals are built:
`pct exec 7804 -- systemctl status gov-portal-DBIS gov-portal-ICCC gov-portal-OMNL gov-portal-XOM`
- **Rebuild a portal:**
`pct exec 7804 -- bash -c 'cd /srv/gov-portals/DBIS && pnpm run build && systemctl restart gov-portal-DBIS'`
- **Update from Gitea:**
`pct exec 7804 -- bash -c 'cd /srv/gov-portals && git pull && git submodule update --remote && pnpm install'`