From c775f4e2c789c41fa04efd38b57af6f4243a2e40 Mon Sep 17 00:00:00 2001
From: goro <water@192.168.1.4>
Date: Sun, 25 Jan 2026 13:21:14 +0700
Subject: [PATCH] deployment

---
 .dockerignore      |  7 +++++++
 Dockerfile         | 22 ++++++++++++++++++++++
 docker-compose.yml | 27 +++++++++++++++++++++++++++
 nginx-initial.conf | 20 ++++++++++++++++++++
 nginx.conf         | 36 ++++++++++++++++++++++++++++++++++++
 5 files changed, 112 insertions(+)
 create mode 100644 .dockerignore
 create mode 100644 Dockerfile
 create mode 100644 docker-compose.yml
 create mode 100644 nginx-initial.conf
 create mode 100644 nginx.conf

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..ecf1a93
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,7 @@
+node_modules
+dist
+.git
+.gitignore
+README.md
+.env
+.DS_Store
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..d0943c6
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,22 @@
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY . .
+RUN npm run build
+
+FROM node:20-alpine AS runtime
+
+WORKDIR /app
+
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/package*.json ./
+
+RUN npm ci --omit=dev
+
+EXPOSE 4321
+
+CMD ["node", "./dist/server/entry.mjs"]
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..4d5bac4
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,27 @@
+version: '3.8'
+
+services:
+  app:
+    build: .
+    restart: unless-stopped
+    networks:
+      - app-network
+
+  nginx:
+    image: nginx:alpine
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - /etc/letsencrypt:/etc/letsencrypt:ro
+      - /var/www/certbot:/var/www/certbot:ro
+    depends_on:
+      - app
+    restart: unless-stopped
+    networks:
+      - app-network
+
+networks:
+  app-network:
+    driver: bridge
diff --git a/nginx-initial.conf b/nginx-initial.conf
new file mode 100644
index 0000000..52090c8
--- /dev/null
+++ b/nginx-initial.conf
@@ -0,0 +1,20 @@
+server {
+    listen 80;
+    server_name nochill.in www.nochill.in;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        proxy_pass http://app:4321;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}
diff --git a/nginx.conf b/nginx.conf
new file mode 100644
index 0000000..3cbba40
--- /dev/null
+++ b/nginx.conf
@@ -0,0 +1,36 @@
+server {
+    listen 80;
+    server_name nochill.in www.nochill.in;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    server_name nochill.in www.nochill.in;
+
+    ssl_certificate /etc/letsencrypt/live/nochill.in/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/nochill.in/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers off;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384';
+
+    location / {
+        proxy_pass http://app:4321;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+}