Files
proxmox/docs/04-configuration/GOV_PORTALS_XOM_DEV_DEPLOYMENT.md
defiQUG bea1903ac9
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
Sync all local changes: docs, config, scripts, submodule refs, verification evidence
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-21 15:46:06 -08:00

2.8 KiB

Gov Portals xom-dev.phoenix.sankofa.nexus Deployment

Domains: dbis, iccc, omnl, xom .xom-dev.phoenix.sankofa.nexus
VM: LXC 7804 (gov-portals-dev) @ 192.168.11.54
NPMplus: Primary (192.168.11.167) — same as sankofa.nexus zone


Quick start

From proxmox repo root, on a host with SSH to Proxmox:

# 1. Create LXC 7804 and deploy gov-portals
bash scripts/deployment/deploy-gov-portals-to-7804.sh

# 2. Add DNS (Cloudflare) - run from any host with .env
bash scripts/cloudflare/add-gov-portals-xom-dev-dns.sh

# 3. Add NPMplus proxy hosts
# Via DB (recommended when API unreachable) - runs over SSH to Proxmox:
bash scripts/nginx-proxy-manager/add-gov-portals-xom-dev-proxy-hosts-db.sh
# Or via API (from LAN host that can reach NPMplus 192.168.11.167:81):
# bash scripts/nginx-proxy-manager/add-gov-portals-xom-dev-proxy-hosts.sh
# Or add manually in NPMplus UI → Hosts → Proxy Hosts

DNS setup

Add A records in Cloudflare (or your DNS) for xom-dev.phoenix.sankofa.nexus:

Type Name Content Proxy
A dbis.xom-dev.phoenix.sankofa.nexus 76.53.10.36 Proxied
A iccc.xom-dev.phoenix.sankofa.nexus 76.53.10.36 Proxied
A omnl.xom-dev.phoenix.sankofa.nexus 76.53.10.36 Proxied
A xom.xom-dev.phoenix.sankofa.nexus 76.53.10.36 Proxied

Or use a wildcard:

Type Name Content
A *.xom-dev.phoenix.sankofa.nexus 76.53.10.36

Port mapping

Domain VM Port Service
dbis.xom-dev.phoenix.sankofa.nexus 3001 DBIS portal
iccc.xom-dev.phoenix.sankofa.nexus 3002 ICCC portal
omnl.xom-dev.phoenix.sankofa.nexus 3003 OMNL portal
xom.xom-dev.phoenix.sankofa.nexus 3004 XOM portal

NPMplus proxy hosts (manual fallback)

If the add script cannot reach NPMplus, add these in NPMplus UI → Hosts → Proxy Hosts:

Domain Forward Hostname Forward Port
dbis.xom-dev.phoenix.sankofa.nexus 192.168.11.54 3001
iccc.xom-dev.phoenix.sankofa.nexus 192.168.11.54 3002
omnl.xom-dev.phoenix.sankofa.nexus 192.168.11.54 3003
xom.xom-dev.phoenix.sankofa.nexus 192.168.11.54 3004

SSL

Request Let's Encrypt certificates in NPMplus UI for each domain, or use a wildcard cert for *.xom-dev.phoenix.sankofa.nexus if your DNS supports it.

Troubleshooting

  • 502 Bad Gateway: Ensure LXC 7804 is running and portals are built:
    pct exec 7804 -- systemctl status gov-portal-DBIS gov-portal-ICCC gov-portal-OMNL gov-portal-XOM
  • Rebuild a portal:
    pct exec 7804 -- bash -c 'cd /srv/gov-portals/DBIS && pnpm run build && systemctl restart gov-portal-DBIS'
  • Update from Gitea:
    pct exec 7804 -- bash -c 'cd /srv/gov-portals && git pull && git submodule update --remote && pnpm install'