# SKG Marketing Studio VPS Deployment

Production domain:

- App: `https://marketing.skg.com`
- API: `https://marketing.skg.com/api`

Current VPS target:

- Host: `76.13.31.179`
- OS: Ubuntu 24.04
- Runtime: Docker Compose
- Public ingress: existing Coolify Traefik on ports 80/443

DNS:

```text
marketing.skg.com A 76.13.31.179
```

Do not run a host Nginx on ports 80/443. Those ports are already owned by Coolify / Traefik. This project publishes through Docker labels on the external `coolify` network.

## First Deploy

On the VPS:

```bash
mkdir -p /opt/skg-marketing-studio
cd /opt/skg-marketing-studio
cp deploy/.env.production.example deploy/.env.production
```

Fill `deploy/.env.production` with the real production keys. Keep this file out of git.

Create the production login file. Replace the username and password as needed:

```bash
printf 'skg:%s\n' "$(openssl passwd -apr1 'change-this-password')" > deploy/.htpasswd
chmod 600 deploy/.htpasswd
```

Then start:

```bash
docker compose -f docker-compose.prod.yml --env-file deploy/.env.production up -d --build
```

Verify:

```bash
curl -I https://marketing.skg.com
curl https://marketing.skg.com/api/health
docker compose -f docker-compose.prod.yml ps
```

## Update

Sync the repo to `/opt/skg-marketing-studio`, then run:

```bash
docker compose -f docker-compose.prod.yml --env-file deploy/.env.production up -d --build
```

## Runtime Notes

- `web` is a static Next export served by Nginx.
- `web` requires Nginx Basic Auth for the whole site and then proxies `/api/` to `skg-marketing-api:4291`; avoid the generic hostname `api` because the web container also joins the shared Coolify network.
- `api` is only on the internal project network and stores jobs under `/data/jobs`.
- Server-side job files persist in `./data/jobs` on the VPS.
- Large uploads are allowed up to `2g` at the Nginx proxy layer.