biztaghavisite/DEPLOY.md

biztaghavi.com — Deployment Guide

Server: 193.105.234.35 (NODE-Cloud, Iran)
Stack: Next.js 16 · MariaDB 11 · Prisma · pnpm · Docker · Nginx
Domain: biztaghavi.com (behind ArvanCloud CDN)

---

0. Pre-flight — do this ONCE on your Mac

Download Prisma engine binaries

Prisma cannot download its binaries on the server (binaries.prisma.sh is blocked). Run this on your Mac:

# Find your exact Prisma version first
cat package.json | grep '"prisma"'
# e.g. "6.x.x"

# Download for Alpine Linux (linux-musl-openssl-3.0.x)
npx prisma@<version> fetch-engines --version linux-musl-openssl-3.0.x

# The binaries land in ~/.prisma/engines/ — copy them to the repo
mkdir -p prisma-binaries
cp ~/.prisma/engines/libquery_engine-linux-musl-openssl-3.0.x.so.node prisma-binaries/
cp ~/.prisma/engines/schema-engine-linux-musl-openssl-3.0.x             prisma-binaries/

# Commit them
git add prisma-binaries/
git commit -m "add prisma engine binaries for linux-musl"

These files are ~50 MB. They must be in git before deployment.

---

1. First-time server setup

ssh root@193.105.234.35

# Create app directory
mkdir -p /srv/nodecloud/apps/biztaghavi
cd /srv/nodecloud/apps/biztaghavi

# Clone from Gitea
git clone http://git.nodecloud.ir/nodegroup/biztaghavi.git .

# Create environment file
cp .env.example .env
nano .env   # fill in real values — see section 2

---

2. Environment variables (.env)

DATABASE_URL=mysql://biztaghavi:STRONG_PASSWORD@db:3306/biztaghavi
SESSION_SECRET=<64-char random hex — run: openssl rand -hex 32>
SETUP_KEY=<secret used once to create admin user>
RESEND_API_KEY=<from resend.com — optional>
CONTACT_EMAIL=ali@biztaghavi.com
NEXT_PUBLIC_SITE_URL=https://biztaghavi.com

# Docker DB credentials (must match DATABASE_URL above)
DB_ROOT_PASSWORD=<strong root password>
DB_NAME=biztaghavi
DB_USER=biztaghavi
DB_PASSWORD=<same as DATABASE_URL password>

---

3. Build & launch

cd /srv/nodecloud/apps/biztaghavi

# Build (first time is slow — ~5-10 min due to Liara mirror rate limiting)
docker compose build --no-cache

# Launch
docker compose up -d

# Verify containers are running
docker compose ps

# Check logs
docker compose logs -f next-app

---

4. Run database migrations

Prisma migrations run via direct SQL (not prisma migrate — that would need network).

# Generate migration SQL from schema
# (run this on your Mac, then copy the SQL to the server)
npx prisma migrate diff \
  --from-empty \
  --to-schema-datamodel prisma/schema.prisma \
  --script > migration.sql

# Copy SQL to server
scp migration.sql root@193.105.234.35:/tmp/

# Apply on server
docker exec -i biztaghavi-db-1 mariadb \
  -u biztaghavi -p'STRONG_PASSWORD' biztaghavi < /tmp/migration.sql

Or use prisma db push directly on the container (doesn't require migrations directory):

docker exec -it biztaghavi-next-app-1 sh -c \
  "DATABASE_URL=mysql://biztaghavi:STRONG_PASSWORD@db:3306/biztaghavi \
   npx prisma db push --skip-generate"

---

5. Create admin user (one-time)

After containers are running:

curl -X POST https://biztaghavi.com/api/admin/setup \
  -H "Content-Type: application/json" \
  -H "x-setup-key: YOUR_SETUP_KEY" \
  -d '{"username":"ali","password":"YOUR_STRONG_PASSWORD"}'

Then remove SETUP_KEY from .env and restart the app:

# Edit .env — delete the SETUP_KEY line
docker compose restart next-app

Admin panel: https://biztaghavi.com/admin

---

6. Nginx config

Port: 3009 (next available after 3008 for Khanehban)

Create /etc/nginx/sites-available/biztaghavi.com:

server {
    listen 80;
    listen [::]:80;
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name biztaghavi.com www.biztaghavi.com;

    ssl_certificate     /etc/ssl/certs/nodecloud-selfsigned.crt;
    ssl_certificate_key /etc/ssl/private/nodecloud-selfsigned.key;

    client_max_body_size 20M;

    location / {
        proxy_pass http://127.0.0.1:3009;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 60;
        proxy_send_timeout 60;
    }
}

ln -s /etc/nginx/sites-available/biztaghavi.com /etc/nginx/sites-enabled/
nginx -t && nginx -s reload

In ArvanCloud dashboard: SSL mode = "Full", origin = 193.105.234.35, purge cache.

Port 3009 must match the ports binding in docker-compose.yml — verify it's "127.0.0.1:3009:3000".

---

7. Uploaded images volume

Images uploaded via the admin panel land in /app/public/uploads/ inside the container. The uploads Docker volume keeps them across redeployments.

To back up uploads manually:

docker cp biztaghavi-next-app-1:/app/public/uploads ./uploads-backup/

---

8. Redeployment (after code changes)

cd /srv/nodecloud/apps/biztaghavi
git pull

# Re-apply Iran Dockerfile is already correct — no extra steps needed
docker compose build --no-cache
docker compose up -d

If Prisma schema changed, re-run the migration SQL step (section 4).

---

9. Troubleshooting

Problem	Fix
Build hangs / 429 from Liara mirror	Wait 15 min, retry. Or transfer node_modules from Mac.
Prisma "engine not found"	Check prisma-binaries/ has both files and is committed.
Container starts but site 502	docker compose logs -f next-app — likely DB connection timeout.
Images not showing	Make sure uploads volume is mounted and client_max_body_size 20M is in nginx.
Admin login fails	Double-check SESSION_SECRET is 32+ chars and consistent across restarts.
DB won't start	MariaDB 11 healthcheck takes ~30s on first boot — wait and retry.

---

10. Transferring node_modules from Mac (fallback if Liara mirror fails)

# On Mac — install for Linux Alpine
npm install \
  --platform=linux --arch=x64 --libc=musl \
  --ignore-scripts

# Also install musl-specific native binaries
npm install \
  @next/swc-linux-x64-musl \
  lightningcss-linux-x64-musl \
  @tailwindcss/oxide-linux-x64-musl \
  --platform=linux --arch=x64 --libc=musl

# Tar it
tar -czf node_modules.tar.gz node_modules/

# Upload to server
scp node_modules.tar.gz root@193.105.234.35:/srv/nodecloud/apps/biztaghavi/

# On server — extract and build without install
tar -xzf node_modules.tar.gz
docker compose build --no-cache   # Dockerfile will skip pnpm install if node_modules exists

You may need to modify the Dockerfile's RUN pnpm install step to skip if node_modules/ already exists when using this approach.