75 lines
2.0 KiB
Markdown
75 lines
2.0 KiB
Markdown
# SKG Marketing Studio VPS Deployment
|
|
|
|
Production domain:
|
|
|
|
- App: `https://marketing.skg.com`
|
|
- API: `https://marketing.skg.com/api`
|
|
|
|
Current VPS target:
|
|
|
|
- Host: `76.13.31.179`
|
|
- OS: Ubuntu 24.04
|
|
- Runtime: Docker Compose
|
|
- Public ingress: existing Coolify Traefik on ports 80/443
|
|
|
|
DNS:
|
|
|
|
```text
|
|
marketing.skg.com A 76.13.31.179
|
|
```
|
|
|
|
Do not run a host Nginx on ports 80/443. Those ports are already owned by Coolify / Traefik. This project publishes through Docker labels on the external `coolify` network.
|
|
|
|
## First Deploy
|
|
|
|
On the VPS:
|
|
|
|
```bash
|
|
mkdir -p /opt/skg-marketing-studio
|
|
cd /opt/skg-marketing-studio
|
|
cp deploy/.env.production.example deploy/.env.production
|
|
```
|
|
|
|
Fill `deploy/.env.production` with the real production keys. Keep this file out of git.
|
|
|
|
Create the production web login values in `deploy/.env.production`. Replace the password as needed and keep the session secret private:
|
|
|
|
```bash
|
|
WEB_AUTH_USERNAME=skg
|
|
WEB_AUTH_PASSWORD=change-this-password
|
|
WEB_AUTH_SESSION_SECRET=$(openssl rand -hex 32)
|
|
WEB_AUTH_COOKIE_NAME=skg_marketing_session
|
|
WEB_AUTH_COOKIE_SECURE=true
|
|
```
|
|
|
|
Then start:
|
|
|
|
```bash
|
|
docker compose -f docker-compose.prod.yml --env-file deploy/.env.production up -d --build
|
|
```
|
|
|
|
Verify:
|
|
|
|
```bash
|
|
curl -I https://marketing.skg.com
|
|
curl -I https://marketing.skg.com/login/
|
|
curl -i https://marketing.skg.com/api/health
|
|
docker compose -f docker-compose.prod.yml ps
|
|
```
|
|
|
|
## Update
|
|
|
|
Sync the repo to `/opt/skg-marketing-studio`, then run:
|
|
|
|
```bash
|
|
docker compose -f docker-compose.prod.yml --env-file deploy/.env.production up -d --build
|
|
```
|
|
|
|
## Runtime Notes
|
|
|
|
- `web` is a static Next export served by Nginx.
|
|
- `web` exposes `/login/` publicly. All workspace routes redirect to `/login/` until the FastAPI session cookie passes Nginx `auth_request`; `/api/` returns JSON 401 when unauthenticated and then proxies to `skg-marketing-api:4291` after login.
|
|
- `api` is only on the internal project network and stores jobs under `/data/jobs`.
|
|
- Server-side job files persist in `./data/jobs` on the VPS.
|
|
- Large uploads are allowed up to `2g` at the Nginx proxy layer.
|