deploy-admin: admin live on .13:3031 (3030=Langfuse), Caddy -> 3031, firewall 3031 pending

This commit is contained in:
2026-08-08 07:41:45 +10:00
parent e5f13e77f1
commit d441c13293

View File

@@ -1,19 +1,19 @@
## 1. Transfer & Build
- [ ] 1.1 rsync `admin/Dockerfile`, `admin/docker-compose.yml`, `admin/app/` (exclude vendor, node_modules, .env, storage/logs) → `sam@192.168.20.13:/home/sam/Docker/Containers/wherewoof-admin/`
- [ ] 1.2 On .13: `docker compose build` (php:8.3 image) + `composer install` via container
- [x] 1.1 rsync `admin/Dockerfile`, `admin/docker-compose.yml`, `admin/app/` (exclude vendor, node_modules, .env, storage/logs) → `sam@192.168.20.13:/home/sam/Docker/Containers/wherewoof-admin/`
- [x] 1.2 On .13: `docker compose build` (php:8.3 image) + `composer install` via container
## 2. Configure & Run
- [ ] 2.1 Write `.env` on .13 (DB 192.168.20.13:5434, APP_KEY generated, SESSION_DRIVER=file); add `restart: unless-stopped` to compose
- [ ] 2.2 `docker compose up -d` → verify `localhost:3030` on .13 returns 200 (login page)
- [x] 2.1 Write `.env` on .13 (DB 192.168.20.13:5434, APP_KEY generated, SESSION_DRIVER=file); add `restart: unless-stopped` to compose
- [x] 2.2 `docker compose up -d` → verify `localhost:3030` on .13 returns 200 (login page)
## 3. Caddy / Firewall
- [ ] 3.1 User: open port 3030 on .13 NixOS firewall (networking.firewall.allowedTCPPorts = [3030])
- [ ] 3.2 Verify `admin.where-woof.com` via .35 Caddy once DNS propagates (cert issuance retries automatically)
- [ ] 3.1 User: open port 3031 on .13 NixOS firewall (3030 = Langfuse; admin now on 3031)
- [x] 3.2 Caddy block updated to .13:3031, Host-header test 200 (public cert pending DNS+firewall)
## 4. Verification
- [ ] 4.1 Smoke: admin login on .13 works (shared DB admin user); resources render
- [ ] 4.2 `openspec validate deploy-admin`; commit
- [x] 4.1 Smoke: admin login on .13 works (shared DB admin user); resources render
- [x] 4.2 `openspec validate deploy-admin`; commit