Add a comprehensive Rocky Linux installation guide and streamline domain configuration

Add a detailed guide for installing the application on Rocky Linux, including systemd service setup and Nginx configuration. Streamline domain setting by introducing a script to update environment variables and rebuild the frontend, and remove the URL input from the flyer component.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 923ae0e3-a363-4db8-b04a-e8baca2a1330
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 3d999b96-66af-4728-92b9-3a39ade05f44
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/8af7d2ec-2cc3-4ece-8af3-9f071488d072/923ae0e3-a363-4db8-b04a-e8baca2a1330/qCk7LE3
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
pironantoine
2026-04-04 14:26:14 +00:00
parent 50bc1f5ce9
commit e279dab70a
5 changed files with 623 additions and 87 deletions
+12 -45
View File
@@ -1,9 +1,6 @@
server {
listen 80;
server_name voix-du-peuple.example.com;
# Redirection HTTPS (décommentez après avoir configuré Certbot)
# return 301 https://$host$request_uri;
listen 8080;
server_name _; # remplacer par votre nom de domaine si nécessaire
root /opt/voix-du-peuple/artifacts/voix-du-peuple/dist/public;
index index.html;
@@ -14,7 +11,13 @@ server {
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# API Flask — proxy vers Gunicorn
# Health check
location /health {
proxy_pass http://127.0.0.1:8000/health;
proxy_set_header Host $host;
}
# API Flask — proxy vers Gunicorn (interne)
location /api/ {
proxy_pass http://127.0.0.1:8000;
proxy_set_header Host $host;
@@ -24,7 +27,7 @@ server {
proxy_read_timeout 60s;
}
# Frontend React — Single Page Application
# Frontend React — SPA
location / {
try_files $uri $uri/ /index.html;
}
@@ -34,42 +37,6 @@ server {
expires 1y;
add_header Cache-Control "public, immutable";
}
}
# HTTPS — décommentez et adaptez après avoir obtenu votre certificat SSL
# server {
# listen 443 ssl http2;
# server_name voix-du-peuple.example.com;
#
# ssl_certificate /etc/letsencrypt/live/voix-du-peuple.example.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/voix-du-peuple.example.com/privkey.pem;
# ssl_protocols TLSv1.2 TLSv1.3;
# ssl_ciphers HIGH:!aNULL:!MD5;
#
# add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
# add_header X-Content-Type-Options "nosniff" always;
# add_header X-Frame-Options "DENY" always;
# add_header X-XSS-Protection "1; mode=block" always;
# add_header Referrer-Policy "strict-origin-when-cross-origin" always;
#
# root /opt/voix-du-peuple/artifacts/voix-du-peuple/dist/public;
# index index.html;
#
# location /api/ {
# proxy_pass http://127.0.0.1:8000;
# proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Proto $scheme;
# proxy_read_timeout 60s;
# }
#
# location / {
# try_files $uri $uri/ /index.html;
# }
#
# location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff2?)$ {
# expires 1y;
# add_header Cache-Control "public, immutable";
# }
# }
client_max_body_size 1m;
}