42 lines
2.7 KiB
Markdown
42 lines
2.7 KiB
Markdown
## Context
|
|
|
|
The GOAT frontend is verified on .27 (dev). Production target per the plan: `.13:/var/www/where-woof`, port `:3020`, behind Caddy on `.35`, domain `where-woof.com` (currently at InMotion, DNS to be repointed). The DB already lives on .13 (`wherewoof-db`, :5434). .13 uses **systemd user services** (lan-mouse, engram) — the established pattern for app processes there. The Caddy block is already saved by the user.
|
|
|
|
## Goals / Non-Goals
|
|
|
|
**Goals:**
|
|
- Frontend live on .13:3020 as a managed, restart-on-failure service.
|
|
- Reproducible build+rsync deploy step; secrets on .13 only.
|
|
- Caddy block verified; DNS/InMotion redirect documented as the user step.
|
|
|
|
**Non-Goals:**
|
|
- Admin (Laravel) deploy — Phase 8.
|
|
- TLS/cert automation specifics (Caddy handles it).
|
|
- Rolling deploys / zero-downtime — single binary, quick restart is fine.
|
|
|
|
## Decisions
|
|
|
|
1. **systemd user service** (`~/.config/systemd/user/where-woof.service`) with `Restart=on-failure`, `EnvironmentFile=/home/sam/.config/where-woof.env` (chmod 600) holding `DATABASE_URL`, `SESSION_SECRET`, `SMS_USER`, `SMS_PASSWORD`, `SMS_FROM`. Matches .13 conventions (lan-mouse) and keeps secrets out of the repo. `systemctl --user enable --now where-woof`.
|
|
2. **Run from /var/www/where-woof** — the app resolves `templates/` + `static/` relative to cwd (proven in dev); `WorkingDirectory=/var/www/where-woof`. Uploads dir pre-created + writable.
|
|
3. **Build on .27, rsync binary+assets** (no Go on .13). `make build` exists; add `make deploy` → rsync + restart.
|
|
4. **DB on localhost**: the .13 service uses `postgres://wherewoof:...@localhost:5434/wherewoof` (container on .13).
|
|
5. **Caddy/DNS**: block already saved on .35; verify `where-woof.home.lab` → .35 → .13:3020 end-to-end once running. DNS repoint of `where-woof.com` (InMotion → .35) is the user's final step.
|
|
|
|
## Risks / Trade-offs
|
|
|
|
- [Secrets in a plaintext file on .13] → chmod 600, matches existing convention; never committed.
|
|
- [Port 3020 conflicts] → verified free on .13.
|
|
- [Uploads lost on redeploy if rsync --delete] → do NOT use --delete on static/; keep uploads untouched.
|
|
- [systemd user service needs lingering for boot] → `loginctl enable-linger sam` so it starts at boot without login.
|
|
|
|
## Migration Plan
|
|
|
|
1. `make build` on .27.
|
|
2. rsync binary + templates + static (no --delete) → /var/www/where-woof; chown sam:users; mkdir uploads.
|
|
3. Write env file (chmod 600) + unit file; `systemctl --user daemon-reload && enable --now`.
|
|
4. Verify: curl localhost:3020 on .13; then from .27 via 192.168.20.13:3020; then via Caddy home.lab if DNS local resolves.
|
|
|
|
## Open Questions
|
|
|
|
- Whether to run real SMS creds on the live service now (suggest: yes — the account has funds, log sender would silently skip alerts otherwise).
|