29b9f3c159
feat(deploy): add --destroy flag and smart update modes
2026-07-06 15:36:48 +01:00
cd15d294a1
feat: subdomain router with certmagic integration
2026-07-06 15:25:21 +01:00
2d3832df0b
feat: hello world pipeline proof
2026-07-06 10:28:20 +01:00
e575b4eeb0
feat: self-signed TLS fallback on :443 + proxy as central router
...
- Add CertFile/KeyFile fields to TLSConfig (config.go)
- File-based TLS fallback: when cert_file+key_file set, ListenAndServeTLS on :443
while keeping HTTP on configured port (certmagic ACME is non-fallback path)
- deploy.sh: enable TLS by default, generate self-signed cert during deploy
- deploy.sh: change default port 8080 → 80 (reverse proxy standard)
- deploy.sh: add cert_file/key_file to config template
- proxy as central router fix (handler.go: ServeHTTP + StaticHandler methods)
2026-07-06 08:59:12 +01:00
b069cab1e3
fix(deploy): default server port to 80 (reverse proxy standard)
...
- Change config template in deploy.sh from port 8080 to port 80
- A reverse proxy must listen on port 80 for public HTTP traffic
- CAP_NET_BIND_SERVICE allows non-root binding to low ports
2026-07-06 08:54:58 +01:00
1efeb05f4f
deploy: production deploy script + path alignment to /opt/nextworkspace/
...
- Add deploy.sh: idempotent production deploy (scaffold, build, systemd, health check)
- Fix update.sh: align all paths from /opt/nextwks/ to /opt/nextworkspace/ (blueprint-compliant)
- deploy.sh safe for first-time setup and subsequent updates
- Creates full blueprint directory tree: config/, data/, logs/, src/core/
2026-07-05 18:19:33 +01:00
