bea1903ac9
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
Co-authored-by: Cursor <cursoragent@cursor.com>
135 lines
7.0 KiB
Markdown
135 lines
7.0 KiB
Markdown
# DApp LXC Deployment (VMID 5801)
|
||
|
||
**Last Updated:** 2026-02-20
|
||
**Status:** Active
|
||
|
||
**Note:** VMID **5800** is reserved for Mifos/Fineract (192.168.11.85, mifos.d-bis.org). The DApp uses **5801** at **192.168.11.58**.
|
||
|
||
---
|
||
|
||
## Overview
|
||
|
||
One Proxmox LXC container (VMID **5801**, hostname **dapp-smom**) runs the Bridge DApp (frontend build from `smom-dbis-138/frontend-dapp`) and is reachable via the existing network and NPMplus.
|
||
|
||
- **VMID:** 5801 (from range 5701–5999; 5800 is Mifos)
|
||
- **Hostname:** dapp-smom
|
||
- **IP:** 192.168.11.58 (static; override with `IP_DAPP_LXC`)
|
||
- **Node:** Default r630-02 (same as 5800); override with `NODE` if needed.
|
||
|
||
## Prerequisites
|
||
|
||
- Run the deploy script from a machine that can SSH to the Proxmox host, or run it on the Proxmox host (with `pct`).
|
||
- Ubuntu 22.04 LTS template on the host: `local:vztmpl/ubuntu-22.04-standard_22.04-1_amd64.tar.zst`.
|
||
- For build: set **REPO_URL** to the Git URL of the repo (e.g. your fork or the main smom-dbis-138 repo).
|
||
|
||
## Running the Script
|
||
|
||
From the **proxmox** repo root (or from `smom-dbis-138`):
|
||
|
||
```bash
|
||
# Optional: load IP/config
|
||
source config/ip-addresses.conf 2>/dev/null || true
|
||
|
||
# Create and provision (from Proxmox host)
|
||
cd smom-dbis-138
|
||
REPO_URL=https://github.com/your-org/smom-dbis-138.git ./scripts/deployment/deploy-dapp-lxc.sh
|
||
|
||
# Or from another machine via SSH
|
||
PROXMOX_HOST=192.168.11.12 REPO_URL=https://github.com/your-org/smom-dbis-138.git \
|
||
./scripts/deployment/deploy-dapp-lxc.sh
|
||
```
|
||
|
||
- **--dry-run:** Print what would be done; do not create or change anything.
|
||
- **--skip-create:** Assume container 5801 already exists; only install Node/nginx, clone, build, and configure nginx.
|
||
|
||
### Env Overrides
|
||
|
||
| Variable | Default | Description |
|
||
|----------------|----------------------|--------------------------------------|
|
||
| VMID | 5801 | Container ID (5800 = Mifos) |
|
||
| HOSTNAME | dapp-smom | Container hostname |
|
||
| IP_DAPP_LXC | 192.168.11.58 | Static IP (`IP_DAPP_LXC` in config) |
|
||
| PROXMOX_HOST | (none) | If set, script SSHs here to run pct |
|
||
| NODE | (none) | Proxmox node name for `pct --node` |
|
||
| REPO_URL | (required for build) | Git URL to clone |
|
||
| ENV_FILE | (none) | Path to .env (VITE_* for build) |
|
||
| MEMORY_MB | 6144 | RAM |
|
||
| CORES | 4 | CPU cores |
|
||
| DISK_GB | 40 | Root disk size |
|
||
| TEMPLATE | ubuntu-22.04-standard | LXC template |
|
||
| IP_CONFIG_PATH | (auto) | Override path to ip-addresses.conf; script also tries SMOM_ROOT/../../config and SCRIPT_DIR/../../../config |
|
||
|
||
## What Runs Inside the LXC
|
||
|
||
- **Node.js 20** (from NodeSource) for building.
|
||
- **Clone** of the repo to `/srv/smom-dbis-138` (from REPO_URL).
|
||
- **Build:** `npm ci && npm run build` in `frontend-dapp`, using env from `/srv/smom-dbis-138/.env` if present (e.g. VITE_* for contract addresses and RPC).
|
||
- **Nginx** serving `/srv/smom-dbis-138/frontend-dapp/dist` on port 80.
|
||
|
||
## Production build: VITE_* and .env
|
||
|
||
VITE_* variables are **baked in at build time**. For a production build with custom contract addresses or RPC URLs you must have a `.env` (or `.env.production`) in the container **before** running `npm run build`.
|
||
|
||
- **Set ENV_FILE** when running the deploy script: the script copies that file into the container (when running on the Proxmox host, or via scp + pct push when using PROXMOX_HOST) before the build step.
|
||
- **Or** after clone and before build: copy `.env` into the container manually, e.g. from the Proxmox host:
|
||
```bash
|
||
pct push 5801 /path/to/your/.env /srv/smom-dbis-138/.env
|
||
```
|
||
then run the build (e.g. with `--skip-create` and REPO_URL set, or run the build step by hand inside the container).
|
||
- **Or** in CI: build with env injected (e.g. `env VITE_RPC_URL_138=... npm run build`), then rsync the `dist/` folder into the container and reload nginx; no need for a full clone inside the container.
|
||
|
||
Relevant VITE_* (see `smom-dbis-138/.env.example` and `frontend-dapp/src/config/bridge.ts`, `networks.ts`):
|
||
|
||
- **RPC:** `VITE_RPC_URL_138`, `VITE_BSC_RPC_URL`, `VITE_AVALANCHE_RPC_URL`, `VITE_CRONOS_RPC_URL`, `VITE_GNOSIS_RPC_URL`
|
||
- **Trustless:** `VITE_LOCKBOX_138`, `VITE_INBOX_ETH_MAINNET`, `VITE_LIQUIDITY_POOL_ETH_MAINNET`, `VITE_BRIDGE_SWAP_COORDINATOR_MAINNET`, `VITE_DUAL_ROUTER_BRIDGE_SWAP_COORDINATOR`, `VITE_CHALLENGE_MANAGER_MAINNET`, `VITE_CUSDT_ADDRESS_138`, `VITE_CUSDC_ADDRESS_138`
|
||
- **WalletConnect / thirdweb:** `VITE_WALLETCONNECT_PROJECT_ID`, `VITE_THIRDWEB_CLIENT_ID`
|
||
|
||
## Updating the DApp
|
||
|
||
1. SSH or `pct exec` into the container:
|
||
```bash
|
||
pct exec 5801 -- bash
|
||
```
|
||
2. Pull and rebuild:
|
||
```bash
|
||
cd /srv/smom-dbis-138 && git pull && cd frontend-dapp && npm ci && npm run build
|
||
```
|
||
3. Reload nginx:
|
||
```bash
|
||
systemctl reload nginx
|
||
```
|
||
|
||
Or from the host (one-liner):
|
||
|
||
```bash
|
||
pct exec 5801 -- bash -c 'cd /srv/smom-dbis-138 && git pull && cd frontend-dapp && npm ci && npm run build && systemctl reload nginx'
|
||
```
|
||
|
||
## NPMplus / Reverse Proxy
|
||
|
||
Add a proxy host in NPMplus pointing to the LXC:
|
||
|
||
- **Upstream:** `http://192.168.11.58:80` (or the IP you set with `IP_DAPP_LXC`).
|
||
- **Domain:** e.g. `dapp.d-bis.org` or `app.d-bis.org` (your choice).
|
||
|
||
Document the chosen hostname in your VMID/IP reference (e.g. [ALL_VMIDS_ENDPOINTS.md](../04-configuration/ALL_VMIDS_ENDPOINTS.md)).
|
||
|
||
## VMID / IP Reference
|
||
|
||
See [ALL_VMIDS_ENDPOINTS.md](../04-configuration/ALL_VMIDS_ENDPOINTS.md) for the 5801 entry (DApp LXC).
|
||
|
||
## Full E2E: Cloudflare Tunnel + DNS + NPMplus SSL
|
||
|
||
To expose the DApp at **https://dapp.d-bis.org** with an existing Cloudflare Tunnel and full SSL:
|
||
|
||
1. **Tunnel (existing):** In Cloudflare Zero Trust → Networks → Tunnels → tunnel that uses `https://192.168.11.167:443` (same as RPC Option B). Add **Public Hostname:** `dapp.d-bis.org` → **URL** `https://192.168.11.167:443` (No TLS Verify).
|
||
2. **DNS:** In Cloudflare DNS (zone d-bis.org), add **CNAME** `dapp` → `<CLOUDFLARE_TUNNEL_ID>.cfargotunnel.com` (Proxied).
|
||
3. **NPMplus (10233 @ 192.168.11.167):** Add Proxy Host: Domain `dapp.d-bis.org`, Forward `192.168.11.58:80`, Scheme HTTP. Request Let's Encrypt (or Cloudflare Origin cert); Force SSL.
|
||
4. **DApp LXC:** Deploy with VMID=5801, IP_DAPP_LXC=192.168.11.58 (see Running the Script above).
|
||
|
||
Traffic flow: **Internet → Cloudflare → Tunnel → NPMplus 10233 → http://192.168.11.58:80** (LXC 5801). See [CHECK_ALL_UPDATES_AND_CLOUDFLARE_TUNNELS.md](../05-network/CHECK_ALL_UPDATES_AND_CLOUDFLARE_TUNNELS.md) and [OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md](../05-network/OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md).
|
||
|
||
## Optional: Token-Aggregation in Same Container
|
||
|
||
To run token-aggregation in the same LXC, install and run it (e.g. via systemd) and optionally proxy it through nginx. Configuration is out of scope here; see token-aggregation docs.
|