estus-shots/.github/used-prompts/deploying.md

Overview

Deploy estus-shots to the personal Fedora server manually—no CI/CD required. The application runs behind Nginx via a reverse proxy and is supervised by systemd.

Prerequisites

• Fedora (server) with SSH access for a user that can sudo without a passwordless setup.
• Nim toolchain installed locally (for nim/nimble).
• Server already provisioned with Nim runtime dependencies.
• Existing Nginx site definition that proxies traffic to the estus-shots service port (defaults to 127.0.0.1:9000).

One-time server setup

1. Create deployment directories on the server:

   ssh user@server 'sudo mkdir -p /opt/estus-shots/bin /opt/estus-shots/config && sudo chown ${USER}:${USER} /opt/estus-shots -R'
   

2. Copy the systemd unit and enable it:

   printf '%s\n' "[Unit]" \
     "Description=estus-shots web service" \
     "After=network.target" \
     "" \
     "[Service]" \
     "Type=simple" \
     "ExecStart=/opt/estus-shots/bin/estus-shots" \
     "Restart=on-failure" \
     "RestartSec=5" \
     "User=www-data" \
     "WorkingDirectory=/opt/estus-shots" \
     "Environment=LOG_LEVEL=info" \
     "" \
     "[Install]" \
     "WantedBy=multi-user.target" \
     | ssh user@server 'sudo tee /etc/systemd/system/estus-shots.service'
   
   ssh user@server 'sudo systemctl daemon-reload && sudo systemctl enable estus-shots.service'
   

3. Ensure Nginx reverse proxy points to 127.0.0.1:9000 and reload it once configured:

   ssh user@server 'sudo systemctl restart nginx'
   

Deployment script

Save the following as scripts/deploy.fish (or another preferred location) and make it executable with chmod +x scripts/deploy.fish.

#!/usr/bin/env fish

set -e

set SERVER user@server
set TARGET_DIR /opt/estus-shots
set BIN_NAME estus-shots

echo 'Building project locally (release)...'
nimble build -y

echo 'Uploading binary...'
scp bin/$BIN_NAME $SERVER:$TARGET_DIR/bin/

echo 'Uploading static assets...'
scp -r src/static $SERVER:$TARGET_DIR/

echo 'Restarting services...'
ssh $SERVER 'sudo systemctl restart estus-shots.service'
ssh $SERVER 'sudo systemctl restart nginx'

echo 'Deployment finished.'

The script prompts for the SSH password and any required sudo password on the server.

Manual deployment steps

1. Build the project locally:

   nimble build -y
   

2. Copy the new build output and static assets:

   scp bin/estus-shots user@server:/opt/estus-shots/bin/
   scp -r src/static user@server:/opt/estus-shots/
   

3. Restart the service and, if needed, Nginx:

   ssh user@server 'sudo systemctl restart estus-shots.service'
   ssh user@server 'sudo systemctl restart nginx'
   

Verification

• Check service status:

  ssh user@server 'systemctl status estus-shots.service --no-pager'
  

• Review recent logs:

  ssh user@server 'journalctl -u estus-shots.service -n 50 --no-pager'
  

Troubleshooting tips

• If the service fails, run it manually on the server to capture stdout/stderr: bin/estus-shots.
• Ensure SELinux contexts allow Nginx to proxy (setsebool -P httpd_can_network_connect 1).
• Validate reverse proxy config: sudo nginx -t.