bea1903ac9
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
Co-authored-by: Cursor <cursoragent@cursor.com>
46 lines
1.7 KiB
Markdown
46 lines
1.7 KiB
Markdown
# SSH Proxmox: DApp LXC + NPMplus
|
|
|
|
Run from a host that can SSH to the Proxmox node.
|
|
|
|
## 1. Deploy DApp LXC (5801)
|
|
|
|
On **r630-02** use storage `thin3` (no `local-lvm`). From the **proxmox** repo root:
|
|
|
|
```bash
|
|
source config/ip-addresses.conf 2>/dev/null || true
|
|
export PROXMOX_HOST="${PROXMOX_HOST_R630_02:-192.168.11.12}"
|
|
export STORAGE="thin3"
|
|
export ENV_FILE="$(pwd)/smom-dbis-138/.env"
|
|
# Option A: copy from local (no git in container)
|
|
export REPO_PATH="$(pwd)/smom-dbis-138"
|
|
# Option B: clone (use HTTPS; private repo needs token or deploy key)
|
|
# export REPO_URL="https://github.com/your-org/smom-dbis-138.git"
|
|
cd smom-dbis-138 && ./scripts/deployment/deploy-dapp-lxc.sh
|
|
```
|
|
|
|
Use `--skip-create` if 5801 already exists. Use `--dry-run` to print only.
|
|
|
|
## 2. NPMplus: add dapp.d-bis.org
|
|
|
|
**Option A — From a host on the same LAN as NPMplus (192.168.11.x):**
|
|
|
|
```bash
|
|
cd /home/intlc/projects/proxmox && source .env && bash scripts/nginx-proxy-manager/complete-dapp-npmplus-from-lan.sh
|
|
```
|
|
|
|
Then in NPMplus UI (https://192.168.11.167:81): open the new proxy for **dapp.d-bis.org**, request SSL, and enable **Force SSL**.
|
|
|
|
**Option B — Via SSH to a Proxmox host** (if that host can reach 192.168.11.167:81):
|
|
|
|
```bash
|
|
cd /home/intlc/projects/proxmox && source .env && source config/ip-addresses.conf && bash scripts/nginx-proxy-manager/add-dapp-proxy-host-via-ssh.sh
|
|
```
|
|
|
|
Set `NPMPLUS_SSH_HOST` if the default (r630-02) cannot reach NPMplus.
|
|
|
|
**Option C — Manual in UI:** Log in at https://192.168.11.167:81 → Proxy Hosts → Add: domain `dapp.d-bis.org`, forward `192.168.11.58:80`, HTTP. Then request SSL and Force SSL.
|
|
|
|
## 3. Tunnel + DNS (optional)
|
|
|
|
Add hostname dapp.d-bis.org to RPC tunnel (URL https://192.168.11.167:443). CNAME dapp -> tunnel in Cloudflare.
|