Lacajita Deployment

Nginx

Configuración Principal

# Archivo de configuración
/etc/nginx/sites-available/lacajita
/etc/nginx/sites-enabled/lacajita -> ../sites-available/lacajita

# Validar configuración
nginx -t

# Recargar
systemctl reload nginx

# Reiniciar
systemctl restart nginx

# Ver logs
tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log

Estructura de Rutas

server {
    listen 80;
    server_name caja.segrd.com;
    
    # Frontend SPA
    root /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj/dist;
    location / {
        try_files $uri $uri/ /index.html;
    }
    
    # API Backend (quita /api)
    location /api/ {
        rewrite ^/api/(.*)$ /$1 break;
        proxy_pass http://127.0.0.1:8001;
    }
    
    # Imágenes estáticas
    location /img/ {
        alias /opt/adm-caja-unified/fastapi-playlists/img/;
        expires 30d;
    }
}

Servicios Systemd

API Admin (puerto 8001)

# Estado
systemctl status lacajita-api

# Reiniciar
systemctl restart lacajita-api

# Ver logs
journalctl -u lacajita-api -f

API Mobile (puerto 8000)

# Estado
systemctl status lacajita-mobile

# Reiniciar
systemctl restart lacajita-mobile

# Ver logs
journalctl -u lacajita-mobile -f

Crear Servicio Systemd

# /etc/systemd/system/lacajita-api.service
[Unit]
Description=La Cajita TV API
After=network.target postgresql.service

[Service]
Type=simple
User=www-data
WorkingDirectory=/opt/adm-caja-unified/fastapi-playlists/Lacajita
ExecStart=/opt/adm-caja-unified/fastapi-playlists/Lacajita/venv/bin/uvicorn Api:app --host 127.0.0.1 --port 8001
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

Build y Deploy

Frontend

cd /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj

# Build
npm run build

# Resultado en /dist
ls -la dist/

Deploy Script

# Script existente
/opt/adm-caja-unified/fastapi-playlists/Lacajita/deploy/build-and-deploy.sh

# O manual:
cd /opt/adm-caja-unified/fastapi-playlists/Lacajita/Adm-Caj
npm run build
systemctl reload nginx

Cloudflare

DNS

caja.segrd.com → Cloudflare Proxy → 24.199.80.16 (origen)

Configuración Recomendada

• SSL: Full (strict) si hay cert en origen, Full si no
• Always Use HTTPS: ON
• Minimum TLS Version: 1.2
• Auto Minify: HTML, CSS, JS
• Caching Level: Standard

SSL/Certificados

Let's Encrypt (sajet.us)

# Certificados existentes
ls /etc/letsencrypt/live/b5f8a23e7d06c2de5ef515ae93e16016.sajet.us/

# Renovar
certbot renew

# Nuevo certificado
certbot --nginx -d dominio.com

Para caja.segrd.com

SSL es manejado por Cloudflare (no necesita cert en origen).

Docker (Opcional)

docker-compose.yml