inshallah last
This commit is contained in:
12
DEPLOY.md
12
DEPLOY.md
@@ -157,14 +157,20 @@ ln -sf /etc/nginx/sites-available/biztaghavi /etc/nginx/sites-enabled/biztaghavi
|
||||
nginx -t && systemctl reload nginx
|
||||
```
|
||||
|
||||
Then issue SSL with Certbot (HTTP must be working first):
|
||||
**SSL (ArvanCloud CDN — recommended):** The repo nginx config listens on **80 and 443** with the shared NODE Cloud self-signed cert (same as khanehbaan.ir). ArvanCloud terminates public HTTPS.
|
||||
|
||||
```bash
|
||||
bash scripts/nginx-ssl-setup.sh
|
||||
```
|
||||
|
||||
In **ArvanCloud dashboard**: SSL mode = **Full**, origin = `193.105.234.35`, purge cache.
|
||||
|
||||
**SSL (direct DNS only):** If the domain does *not* use ArvanCloud, use certbot instead of the self-signed block:
|
||||
|
||||
```bash
|
||||
certbot --nginx -d biztaghavi.com -d www.biztaghavi.com
|
||||
```
|
||||
|
||||
In **ArvanCloud dashboard**: SSL mode = "Full (strict)", origin = `193.105.234.35`, purge cache.
|
||||
|
||||
> Port **3009** must match the `ports` binding in `docker-compose.yml` — verify it's `"127.0.0.1:3009:3000"`.
|
||||
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user