This commit is contained in:
Matthias Hochmeister
2026-02-27 14:02:03 +01:00
parent 04d4f89834
commit 1c6c59c199
10 changed files with 76 additions and 66 deletions

View File

@@ -154,19 +154,19 @@ NODE_ENV=production
JWT_SECRET=<generated-jwt-secret>
# CORS - Set to your domain!
CORS_ORIGIN=https://dashboard.yourdomain.com
CORS_ORIGIN=https://start.feuerwehr-rems.at
# Frontend
FRONTEND_PORT=80
# API URL - Set to your backend URL
VITE_API_URL=https://api.yourdomain.com
VITE_API_URL=https://start.feuerwehr-rems.at
# Authentik OAuth (from Authentik setup)
AUTHENTIK_CLIENT_ID=<your-client-id>
AUTHENTIK_CLIENT_SECRET=<your-client-secret>
AUTHENTIK_ISSUER=https://auth.yourdomain.com/application/o/feuerwehr/
AUTHENTIK_REDIRECT_URI=https://dashboard.yourdomain.com/auth/callback
AUTHENTIK_ISSUER=https://auth.firesuite.feuerwehr-rems.at/application/o/feuerwehr/
AUTHENTIK_REDIRECT_URI=https://start.feuerwehr-rems.at/auth/callback
```
Secure the .env file:
@@ -253,7 +253,7 @@ Key points for production:
Create `Caddyfile`:
```caddy
dashboard.yourdomain.com {
start.feuerwehr-rems.at {
reverse_proxy localhost:80
encode gzip
@@ -265,7 +265,7 @@ dashboard.yourdomain.com {
}
}
api.yourdomain.com {
start.feuerwehr-rems.at {
reverse_proxy localhost:3000
encode gzip
}
@@ -299,7 +299,7 @@ Create Nginx configuration (`/etc/nginx/sites-available/feuerwehr`):
```nginx
server {
listen 80;
server_name dashboard.yourdomain.com;
server_name start.feuerwehr-rems.at;
location / {
proxy_pass http://localhost:80;
@@ -312,7 +312,7 @@ server {
server {
listen 80;
server_name api.yourdomain.com;
server_name start.feuerwehr-rems.at;
location / {
proxy_pass http://localhost:3000;
@@ -330,7 +330,7 @@ Enable and obtain SSL:
sudo ln -s /etc/nginx/sites-available/feuerwehr /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx
sudo certbot --nginx -d dashboard.yourdomain.com -d api.yourdomain.com
sudo certbot --nginx -d start.feuerwehr-rems.at -d start.feuerwehr-rems.at
```
### Option 3: Using Docker with Traefik